last executing test programs: 25m43.473184886s ago: executing program 1 (id=2): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x24040801) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 25m40.406354558s ago: executing program 1 (id=8): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 25m37.099425242s ago: executing program 1 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25m33.573288762s ago: executing program 1 (id=14): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 25m27.298102796s ago: executing program 1 (id=19): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 25m24.485303112s ago: executing program 1 (id=24): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4040000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) 25m8.766343904s ago: executing program 32 (id=24): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4040000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) 23m32.685246839s ago: executing program 0 (id=144): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 23m29.201570973s ago: executing program 0 (id=148): socket(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x4, "650000006e0000000100"}) syz_open_procfs(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x412300, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x4, 0x1, 0x0, 0x3, 0x10, 0x1, 0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x23}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r2, 0x0, 0xfce) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008001340000003"], 0x58}, 0x1, 0x0, 0x0, 0x8090}, 0x40c0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 23m27.81150408s ago: executing program 0 (id=152): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x8002, 0x2, 0xf1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) 23m19.934342832s ago: executing program 0 (id=158): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 23m17.227188281s ago: executing program 0 (id=161): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000080)={0x31, &(0x7f00000000c0)=[{0x1a, '\x00', @buffer={"ee601356558b1e94469e435189ead1b9370ded617790aad9ba26302d89d24c8c", 0x20}, 0x8001}]}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x54, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x29}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000040) 23m12.395771908s ago: executing program 0 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22m56.453658038s ago: executing program 33 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22m29.329265489s ago: executing program 4 (id=209): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 22m27.265587845s ago: executing program 4 (id=213): socket(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x4, "650000006e0000000100"}) syz_open_procfs(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x412300, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x4, 0x1, 0x0, 0x3, 0x10, 0x1, 0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x23}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r2, 0x0, 0xfce) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008001340000003"], 0x58}, 0x1, 0x0, 0x0, 0x8090}, 0x40c0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 22m26.359290457s ago: executing program 4 (id=215): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000080)={0x31, &(0x7f00000000c0)=[{0x1a, '\x00', @buffer={"ee601356558b1e94469e435189ead1b9370ded617790aad9ba26302d89d24c8c", 0x20}, 0x8001}]}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x54, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x29}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000040) 22m24.556135263s ago: executing program 4 (id=219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22m19.261612196s ago: executing program 4 (id=223): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x8002, 0x2, 0xf1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) 22m15.007185041s ago: executing program 4 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21m58.605838369s ago: executing program 34 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m26.436229727s ago: executing program 3 (id=390): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x8002, 0x2, 0xf1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) 18m25.179477393s ago: executing program 3 (id=391): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000080)={0x31, &(0x7f00000000c0)=[{0x1a, '\x00', @buffer={"ee601356558b1e94469e435189ead1b9370ded617790aad9ba26302d89d24c8c", 0x20}, 0x8001}]}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x54, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x29}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000040) 18m23.844852305s ago: executing program 3 (id=392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m17.700526853s ago: executing program 3 (id=393): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(0xffffffffffffffff, r0) close_range(r4, 0xffffffffffffffff, 0x0) 18m16.289332902s ago: executing program 3 (id=395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m12.423419865s ago: executing program 3 (id=397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m56.918226266s ago: executing program 35 (id=397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m34.600310802s ago: executing program 7 (id=917): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) 4m26.899779286s ago: executing program 7 (id=923): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 4m20.352504694s ago: executing program 7 (id=927): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4}) mmap(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"84ca18eaa852b1a3bb3e80fe4eee1e4efbe55b52637d7e57c6f18b1d38286e1e4f37d997fe32fe60b40690718c3efe462c935f0d40f1aeeffa2cf8101f28571b6dfc5560095636dd10ace18ee9c6b5b854d8d974d1c26b1a3b9900a365d717934bb0a489f0cebb1597f4e2bb5cfd0c5629f0a6a86e104c0b6c74dd41f07312910c778d23ee7e0c3a8c94ed8226925f0f05f288604684d76c58a0c09601ce1f11a06333743f6997026ef3edbcb9f3adc11f921bc91f7f9e8715fb886e1ff8544885de0da0b5fcd763e5539dd92ae1a27b5cda25329f8577cec548db45330209382208cd9e77998ccd3eb075cdf236c2166b13b7caf92272da52deb450f8544e3a4b95f3dead6c76ccd8943dff073a601d53b43d9394a9552ab9f78023b2b6b3db61d3d8ed662359066df8f0d398307ba15450c47bb2b97fd48f8e4a59c997b7d15d790978d3352ec552310bd219e72f997b04cc0d8c7afb392a36cc9b17fb5ab09647fc59984c2ee3a882d102cfe3bf29aeab03813d822cb9b1997876e0e603a099aed4dad75b83669b90dd808302b7c0bf5f88d020aa3d9beba2374670572ad0de5e4c78067e74f96a2baa3ec401520e7e4c2ff4cdb809b16d376fa622ebee5db6b8670ed68706e179b58de0aaaa3e43fb5d2a45582196aaf3aa232151aafbf7265d7c339a4f3b9d3f942aae8a4397db047abad9dfa7cd220a105e6d8faf25ff9312228b287db69b0f4f50b092f80e4336a2e327ba613f221e1fc859305b1b0b04c450952852653e200e6bd0293a1e1921b1292fa09dfba00cae70a01b590189f6a391fd4445abeea55e9c54d9f975227021d08b1861b8279edf51612e238cb36494ef745f3e1eb778ab341a8a36495695f29a60d717a4f5d534a00a2a3d020e61884201b33ce2e1c0420a05b5de2d3034f8bc14cc864b7d9394a1fda8db1e24bd14bf912656874e47cd30210c25107ea9b8d21d3b7198b0936acf0f15db949dbf22d51fc289cda1a550f3cba42e42184e5d61d61f2293735557f67d54bc3b4aba898119c3645c233ee02c4ab4b1b900e9aebdc2b772bb933d002a2b7ca954373e37eefa4377a93b16f8cd17613d714592afdc410ac705cb9798be70a8e64193214342992392c42475bbf9f33ad2d678e62af6f01b9f202a86fc549ed233724021ef50a0c82c6b3a51817c63d6dd706d9dae6e8b1fb61ffdcd59af94a92733c1b763007ef78e2d90bbdcde589b8f40e067a127841eb469d8aff8cee7d03d11ab2a6ddf0184301e11eec507393aa6df565e2503f5bb3210726f0b9bd49c6caf8ba93e709049fb4c9eaf9f66bae4d8749a2989214c0c2290b2841368481d67d5a6c6a6126b696a554132656c9ef3d4054349c2a312a1ef427f3b1ec6d3b2a8cfdbc722373932a2892f0333d879800b7cfaa94259a2c301ff48c575279da1de8198"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m17.447092936s ago: executing program 7 (id=930): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m14.849168713s ago: executing program 7 (id=933): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100", @ANYRES32=r1], 0x50}}, 0x4080) io_setup(0x3, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 4m12.676378133s ago: executing program 7 (id=934): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r6, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 3m55.341321536s ago: executing program 36 (id=934): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r6, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 18.821505212s ago: executing program 2 (id=1125): r0 = syz_open_dev$dmmidi(0x0, 0xca64, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) fcntl$notify(r0, 0x402, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x201) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write(0xffffffffffffffff, &(0x7f00000001c0)="f300533b6d1e0e495b21fa81aed055ad5056d0c5d0e173b92187aa4455cd3c0aec5d591a67cd93283a00e9d4f1c0a01021a3ce0c3067e07c9505e69e0284094da3f63cde93de29bb2d91a160411fe0129d3ef8a311b403a9e1b79c0a786707ae6b0981c83b6a56bb380e79489291eed29590d094ac82d2cec8633b", 0x7b) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000005c0)=""/210) openat$zero(0xffffff9c, &(0x7f00000000c0), 0x80002, 0x0) socket(0xa, 0x3, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) 15.539857075s ago: executing program 2 (id=1126): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100", @ANYRES32], 0x50}}, 0x4080) io_setup(0x3, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100", @ANYRES32=r1], 0x50}}, 0x4080) io_setup(0x3, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 11.220109073s ago: executing program 2 (id=1131): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040801) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r8], 0x5c}}, 0x40) 10.801538752s ago: executing program 5 (id=1132): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 9.289601435s ago: executing program 6 (id=1133): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) bind$netrom(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 7.919048079s ago: executing program 5 (id=1134): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) 7.491484574s ago: executing program 6 (id=1135): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 6.985995511s ago: executing program 2 (id=1136): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(0xffffffffffffffff, r0) close_range(r4, 0xffffffffffffffff, 0x0) 5.887258314s ago: executing program 5 (id=1137): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000080)={0x31, 0x0}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x54, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x29}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000040) 5.778192112s ago: executing program 6 (id=1138): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 2.138614538s ago: executing program 6 (id=1139): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.796048377s ago: executing program 5 (id=1140): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100", @ANYRES32=r1], 0x50}}, 0x4080) io_setup(0x3, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 1.688490773s ago: executing program 2 (id=1141): io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 695.664095ms ago: executing program 6 (id=1142): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 91.384794ms ago: executing program 5 (id=1143): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) bind$netrom(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1144): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={r4, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): etdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1001.645083][ T9140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1001.813702][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1001.829565][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1001.850848][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1001.889397][ T9140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1001.900745][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1001.916372][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1002.212798][ T9140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1002.296860][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1002.307474][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1002.329399][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1002.360782][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1002.377852][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1002.828448][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.034356][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.271139][ T49] Bluetooth: hci0: command tx timeout [ 1004.639271][ T49] Bluetooth: hci2: command tx timeout [ 1006.725253][ T49] Bluetooth: hci0: command tx timeout [ 1006.730948][ T49] Bluetooth: hci2: command tx timeout [ 1007.872445][ T146] bridge_slave_1: left allmulticast mode [ 1007.883514][ T146] bridge_slave_1: left promiscuous mode [ 1007.890245][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.011998][ T146] bridge_slave_0: left allmulticast mode [ 1008.023443][ T146] bridge_slave_0: left promiscuous mode [ 1008.033651][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.625300][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.675247][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.708625][ T146] bond0 (unregistering): Released all slaves [ 1008.773163][ T5785] Bluetooth: hci2: command tx timeout [ 1008.778817][ T5785] Bluetooth: hci0: command tx timeout [ 1008.857678][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.183591][ T146] hsr_slave_0: left promiscuous mode [ 1009.209061][ T146] hsr_slave_1: left promiscuous mode [ 1009.252383][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.331122][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.272262][ T5785] Bluetooth: hci0: command tx timeout [ 1011.284347][ T5785] Bluetooth: hci2: command tx timeout [ 1013.784504][ T146] team0 (unregistering): Port device team_slave_1 removed [ 1013.860223][ T146] team0 (unregistering): Port device team_slave_0 removed [ 1013.905620][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1013.925325][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1013.939541][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1013.964554][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1013.984814][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1016.053008][ T49] Bluetooth: hci5: command tx timeout [ 1016.220244][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1016.257824][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1016.276176][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1016.303575][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1016.333729][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.203953][ T9335] chnl_net:caif_netlink_parms(): no params data found [ 1017.661973][ T9339] chnl_net:caif_netlink_parms(): no params data found [ 1018.170107][ T49] Bluetooth: hci5: command tx timeout [ 1018.373347][ T49] Bluetooth: hci1: command tx timeout [ 1019.365756][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.374461][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.382347][ T9335] bridge_slave_0: entered allmulticast mode [ 1019.394712][ T9335] bridge_slave_0: entered promiscuous mode [ 1020.217553][ T49] Bluetooth: hci5: command tx timeout [ 1020.364914][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.409051][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.445178][ T9335] bridge_slave_1: entered allmulticast mode [ 1020.456869][ T49] Bluetooth: hci1: command tx timeout [ 1020.476292][ T9335] bridge_slave_1: entered promiscuous mode [ 1020.992034][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.125592][ T9364] chnl_net:caif_netlink_parms(): no params data found [ 1021.315605][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.442261][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.456751][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.466279][ T9339] bridge_slave_0: entered allmulticast mode [ 1021.479928][ T9339] bridge_slave_0: entered promiscuous mode [ 1022.100999][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.115605][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.133729][ T9339] bridge_slave_1: entered allmulticast mode [ 1022.145565][ T9339] bridge_slave_1: entered promiscuous mode [ 1022.242311][ T9335] team0: Port device team_slave_0 added [ 1022.293258][ T49] Bluetooth: hci5: command tx timeout [ 1022.533398][ T49] Bluetooth: hci1: command tx timeout [ 1022.605905][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.762183][ T9335] team0: Port device team_slave_1 added [ 1023.175433][ T9376] chnl_net:caif_netlink_parms(): no params data found [ 1024.600652][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.613037][ T49] Bluetooth: hci1: command tx timeout [ 1026.525185][ T9339] team0: Port device team_slave_0 added [ 1026.557994][ T9339] team0: Port device team_slave_1 added [ 1026.631218][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.651458][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.683621][ T9335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.917882][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.930045][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.983002][ T9335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.144165][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.151460][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.211782][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.330646][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.339536][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.383791][ T9364] bridge_slave_0: entered allmulticast mode [ 1027.413723][ T9364] bridge_slave_0: entered promiscuous mode [ 1027.465794][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.484944][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.514532][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.543816][ T9364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.551375][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.566489][ T9364] bridge_slave_1: entered allmulticast mode [ 1027.578888][ T9364] bridge_slave_1: entered promiscuous mode [ 1028.296897][ T9335] hsr_slave_0: entered promiscuous mode [ 1028.309990][ T9335] hsr_slave_1: entered promiscuous mode [ 1028.348611][ T9364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.368411][ T146] bridge_slave_1: left allmulticast mode [ 1028.492915][ T146] bridge_slave_1: left promiscuous mode [ 1028.499639][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.541457][ T146] bridge_slave_0: left allmulticast mode [ 1028.549574][ T146] bridge_slave_0: left promiscuous mode [ 1028.578055][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.625137][ T146] bridge_slave_1: left allmulticast mode [ 1028.647501][ T146] bridge_slave_1: left promiscuous mode [ 1028.662080][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.719592][ T146] bridge_slave_0: left allmulticast mode [ 1028.726121][ T146] bridge_slave_0: left promiscuous mode [ 1028.744120][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.182432][ T9433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.551'. [ 1029.545486][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.660261][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.738972][ T146] bond0 (unregistering): Released all slaves [ 1031.997004][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.127208][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.257294][ T146] bond0 (unregistering): Released all slaves [ 1033.219160][ T9339] hsr_slave_0: entered promiscuous mode [ 1033.259926][ T9339] hsr_slave_1: entered promiscuous mode [ 1033.307636][ T9339] debugfs: 'hsr0' already exists in 'hsr' [ 1033.333378][ T9339] Cannot create hsr debugfs directory [ 1033.551812][ T9364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.148579][ T9376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.157056][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.165341][ T9376] bridge_slave_0: entered allmulticast mode [ 1034.175242][ T9376] bridge_slave_0: entered promiscuous mode [ 1034.212232][ T146] hsr_slave_0: left promiscuous mode [ 1034.221198][ T146] hsr_slave_1: left promiscuous mode [ 1034.229798][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.240342][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.290944][ T146] hsr_slave_0: left promiscuous mode [ 1034.311890][ T146] hsr_slave_1: left promiscuous mode [ 1034.324790][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.344579][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.091528][ T146] team0 (unregistering): Port device team_slave_1 removed [ 1035.389286][ T146] team0 (unregistering): Port device team_slave_0 removed [ 1037.148983][ T146] team0 (unregistering): Port device team_slave_1 removed [ 1037.390193][ T146] team0 (unregistering): Port device team_slave_0 removed [ 1040.378108][ T9364] team0: Port device team_slave_0 added [ 1040.504716][ T9376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.562996][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.570595][ T9376] bridge_slave_1: entered allmulticast mode [ 1040.592512][ T9376] bridge_slave_1: entered promiscuous mode [ 1040.689073][ T9376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.722506][ T9364] team0: Port device team_slave_1 added [ 1040.828524][ T9376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.144423][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'. [ 1041.225449][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.250529][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.292693][ T9364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.440155][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.496607][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.534337][ T9364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.675127][ T9376] team0: Port device team_slave_0 added [ 1041.966215][ T9376] team0: Port device team_slave_1 added [ 1042.195524][ T9376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.205782][ T9376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.237447][ T9376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.600371][ T9376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.628201][ T9376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.655252][ T9376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.769625][ T9364] hsr_slave_0: entered promiscuous mode [ 1042.780548][ T9364] hsr_slave_1: entered promiscuous mode [ 1042.790273][ T9364] debugfs: 'hsr0' already exists in 'hsr' [ 1042.799625][ T9364] Cannot create hsr debugfs directory [ 1046.730164][ T9376] hsr_slave_0: entered promiscuous mode [ 1046.763128][ T9376] hsr_slave_1: entered promiscuous mode [ 1046.796142][ T9376] debugfs: 'hsr0' already exists in 'hsr' [ 1046.807803][ T9376] Cannot create hsr debugfs directory [ 1047.906793][ T9467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.560'. [ 1048.966866][ T146] bridge_slave_1: left allmulticast mode [ 1048.974030][ T146] bridge_slave_1: left promiscuous mode [ 1048.982294][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.001150][ T146] bridge_slave_0: left allmulticast mode [ 1049.009293][ T146] bridge_slave_0: left promiscuous mode [ 1049.016793][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.552357][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.636306][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.710965][ T146] bond0 (unregistering): Released all slaves [ 1050.678755][ T146] hsr_slave_0: left promiscuous mode [ 1050.693149][ T146] hsr_slave_1: left promiscuous mode [ 1050.700419][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.712020][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.239724][ T146] team0 (unregistering): Port device team_slave_1 removed [ 1051.310147][ T146] team0 (unregistering): Port device team_slave_0 removed [ 1051.470405][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 1052.227618][ T9339] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1052.362095][ T9339] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1052.491039][ T9339] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1052.593202][ T9339] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1052.711994][ T9335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1052.800740][ T9335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1052.911334][ T9335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1052.978759][ T9335] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1058.549196][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.602079][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.672108][ T9339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.718483][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.726033][ T8718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.878012][ T9376] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1058.927773][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.935246][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.993392][ T9376] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1059.122399][ T9376] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1059.164475][ T9376] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1059.231822][ T9493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.567'. [ 1059.370253][ T9335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.598584][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.606156][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.879299][ T9364] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1060.038280][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.045833][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.103456][ T9364] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1060.192889][ T9364] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1060.300417][ T9364] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1061.683566][ T9376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.136217][ T9376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.366787][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.374581][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.807599][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.825583][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.028313][ T9364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.098057][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.105747][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.482011][ T9364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.561172][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1066.570645][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1066.580342][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1066.595343][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1066.606762][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1066.893896][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.570'. [ 1067.059300][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.066991][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.292520][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1067.314234][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1067.343495][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1067.376605][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.384330][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.404051][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1067.417077][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1068.693109][ T49] Bluetooth: hci3: command tx timeout [ 1069.505797][ T49] Bluetooth: hci6: command tx timeout [ 1069.816040][ T9537] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 1069.950386][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 1070.224073][ T56] bridge_slave_1: left allmulticast mode [ 1070.230001][ T56] bridge_slave_1: left promiscuous mode [ 1070.242355][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.258668][ T56] bridge_slave_0: left allmulticast mode [ 1070.265361][ T56] bridge_slave_0: left promiscuous mode [ 1070.272082][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.609700][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.636404][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.658279][ T56] bond0 (unregistering): Released all slaves [ 1070.773249][ T49] Bluetooth: hci3: command tx timeout [ 1070.978952][ T56] hsr_slave_0: left promiscuous mode [ 1070.997486][ T56] hsr_slave_1: left promiscuous mode [ 1071.015512][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.035255][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.508454][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1071.554907][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1071.572867][ T49] Bluetooth: hci6: command tx timeout [ 1073.026776][ T49] Bluetooth: hci3: command tx timeout [ 1073.939547][ T49] Bluetooth: hci6: command tx timeout [ 1075.660388][ T49] Bluetooth: hci3: command tx timeout [ 1076.658170][ T49] Bluetooth: hci6: command tx timeout [ 1078.113324][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.126448][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.136390][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.150574][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.163049][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1078.721969][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1078.746766][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1078.757139][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1078.772442][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1078.790864][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1080.400169][ T49] Bluetooth: hci0: command tx timeout [ 1080.831043][ T9518] chnl_net:caif_netlink_parms(): no params data found [ 1080.853751][ T49] Bluetooth: hci2: command tx timeout [ 1081.336232][ T9511] chnl_net:caif_netlink_parms(): no params data found [ 1082.543557][ T49] Bluetooth: hci0: command tx timeout [ 1083.021162][ T49] Bluetooth: hci2: command tx timeout [ 1084.724486][ T49] Bluetooth: hci0: command tx timeout [ 1085.200379][ T49] Bluetooth: hci2: command tx timeout [ 1085.912015][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 1086.896610][ T49] Bluetooth: hci0: command tx timeout [ 1086.945883][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.954975][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.967661][ T9518] bridge_slave_0: entered allmulticast mode [ 1086.979681][ T9518] bridge_slave_0: entered promiscuous mode [ 1087.081194][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.097618][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.114416][ T9511] bridge_slave_0: entered allmulticast mode [ 1087.146328][ T9511] bridge_slave_0: entered promiscuous mode [ 1087.193750][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.221564][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.233445][ T9518] bridge_slave_1: entered allmulticast mode [ 1087.246757][ T9518] bridge_slave_1: entered promiscuous mode [ 1087.257559][ T49] Bluetooth: hci2: command tx timeout [ 1087.405139][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.418650][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.427416][ T9511] bridge_slave_1: entered allmulticast mode [ 1087.437719][ T9511] bridge_slave_1: entered promiscuous mode [ 1087.451966][ T9591] netlink: 48 bytes leftover after parsing attributes in process `syz.2.579'. [ 1087.510084][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.604777][ T9553] chnl_net:caif_netlink_parms(): no params data found [ 1087.984600][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.329584][ T9511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.739219][ T9511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.126085][ T9558] chnl_net:caif_netlink_parms(): no params data found [ 1089.246318][ T56] bridge_slave_1: left allmulticast mode [ 1089.252224][ T56] bridge_slave_1: left promiscuous mode [ 1089.314931][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.360265][ T56] bridge_slave_0: left allmulticast mode [ 1089.377302][ T56] bridge_slave_0: left promiscuous mode [ 1089.419210][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.485216][ T56] bridge_slave_1: left allmulticast mode [ 1089.530696][ T56] bridge_slave_1: left promiscuous mode [ 1089.580125][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.644803][ T56] bridge_slave_0: left allmulticast mode [ 1089.650728][ T56] bridge_slave_0: left promiscuous mode [ 1089.701985][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.960581][ T9607] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 1091.114222][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 1091.161438][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.224665][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.243950][ T56] bond0 (unregistering): Released all slaves [ 1091.574011][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.603433][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.620100][ T56] bond0 (unregistering): Released all slaves [ 1091.660556][ T9518] team0: Port device team_slave_0 added [ 1091.747478][ T9511] team0: Port device team_slave_0 added [ 1091.805404][ T9511] team0: Port device team_slave_1 added [ 1092.060932][ T9608] bond11: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1092.083324][ T9608] bond11: (slave vxcan9): Error -95 calling set_mac_address [ 1092.177093][ T9518] team0: Port device team_slave_1 added [ 1092.312346][ T56] hsr_slave_0: left promiscuous mode [ 1092.322058][ T56] hsr_slave_1: left promiscuous mode [ 1092.330317][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.383053][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.424947][ T56] hsr_slave_0: left promiscuous mode [ 1092.435154][ T56] hsr_slave_1: left promiscuous mode [ 1092.443642][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.460516][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.445876][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1093.746716][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1097.858976][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1098.047778][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1099.352034][ T9553] debugfs: 'netdev@ffff88803ef7f568' already exists in 'ref_tracker' [ 1101.414463][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.455461][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.558820][ T9511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.939453][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.952791][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.030215][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.116200][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.123887][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.188183][ T9511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.298782][ T9553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.315696][ T9553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.329367][ T9553] bridge_slave_0: entered allmulticast mode [ 1102.347233][ T9553] bridge_slave_0: entered promiscuous mode [ 1102.408562][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.416207][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.425844][ T9553] bridge_slave_1: entered allmulticast mode [ 1102.437765][ T9553] bridge_slave_1: entered promiscuous mode [ 1102.453051][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.460394][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.492012][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.780158][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 1103.010202][ T9553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.081226][ T9553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.198955][ T9518] hsr_slave_0: entered promiscuous mode [ 1103.219273][ T9518] hsr_slave_1: entered promiscuous mode [ 1103.301174][ T9511] hsr_slave_0: entered promiscuous mode [ 1103.330228][ T9511] hsr_slave_1: entered promiscuous mode [ 1103.351242][ T9511] debugfs: 'hsr0' already exists in 'hsr' [ 1103.401269][ T9511] Cannot create hsr debugfs directory [ 1105.975015][ T9553] team0: Port device team_slave_0 added [ 1106.039844][ T9553] team0: Port device team_slave_1 added [ 1107.307779][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.316588][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.324855][ T9558] bridge_slave_0: entered allmulticast mode [ 1107.336075][ T9558] bridge_slave_0: entered promiscuous mode [ 1107.352880][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.360651][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.376613][ T9558] bridge_slave_1: entered allmulticast mode [ 1107.391875][ T9558] bridge_slave_1: entered promiscuous mode [ 1107.985649][ T9553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.993851][ T9553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.021089][ T9553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.046634][ T9553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.055781][ T9553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.082880][ T9553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.142134][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.172460][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.305823][ T9558] team0: Port device team_slave_0 added [ 1108.352471][ T9558] team0: Port device team_slave_1 added [ 1108.473360][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.480898][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.513753][ T9558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.531611][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.548888][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.590882][ T9558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.785121][ T9558] hsr_slave_0: entered promiscuous mode [ 1108.796594][ T9558] hsr_slave_1: entered promiscuous mode [ 1108.816759][ T9558] debugfs: 'hsr0' already exists in 'hsr' [ 1108.828083][ T9558] Cannot create hsr debugfs directory [ 1110.182057][ T9553] hsr_slave_0: entered promiscuous mode [ 1110.228143][ T9553] hsr_slave_1: entered promiscuous mode [ 1110.256728][ T9553] debugfs: 'hsr0' already exists in 'hsr' [ 1110.282008][ T9553] Cannot create hsr debugfs directory [ 1111.154411][ T9670] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 1111.560235][ T9672] bond12: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1111.582321][ T9672] bond12: (slave vxcan9): Error -95 calling set_mac_address [ 1112.105950][ T56] bridge_slave_1: left allmulticast mode [ 1112.114085][ T56] bridge_slave_1: left promiscuous mode [ 1112.120808][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.146749][ T56] bridge_slave_0: left allmulticast mode [ 1112.158720][ T56] bridge_slave_0: left promiscuous mode [ 1112.171732][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.493068][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.664940][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.729002][ T56] bond0 (unregistering): Released all slaves [ 1116.678721][ T56] hsr_slave_0: left promiscuous mode [ 1116.687984][ T56] hsr_slave_1: left promiscuous mode [ 1116.696799][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.711631][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.425904][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1118.527224][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1119.519815][ T9518] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1119.598292][ T9518] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1119.636841][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 1119.724051][ T9518] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1119.795733][ T9518] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1124.337256][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.498496][ T9518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.578527][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.586198][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.701506][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.709428][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.695699][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.702366][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.973280][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1125.983582][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1126.005801][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1126.065285][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1126.115341][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1126.269660][ T9558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1126.814963][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1126.825969][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1126.835763][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1126.857287][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1126.871720][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1127.036613][ T9558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1127.287275][ T9558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1127.424141][ T9558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1127.816773][ T9553] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1128.029986][ T9553] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1128.112330][ T9553] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1128.121353][ T9733] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 1128.215312][ T49] Bluetooth: hci1: command tx timeout [ 1128.330829][ T9735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.595'. [ 1128.589073][ T9553] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1128.754208][ T9734] bond13: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1128.804047][ T9734] bond13: (slave vxcan9): Error -95 calling set_mac_address [ 1128.926688][ T9735] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1129.018275][ T49] Bluetooth: hci5: command tx timeout [ 1129.768455][ T9742] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 1130.051506][ T9743] bond14: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1130.071132][ T9743] bond14: (slave vxcan9): Error -95 calling set_mac_address [ 1130.293863][ T49] Bluetooth: hci1: command tx timeout [ 1130.590468][ T9721] chnl_net:caif_netlink_parms(): no params data found [ 1130.922281][ T9726] chnl_net:caif_netlink_parms(): no params data found [ 1131.019589][ T2926] bridge_slave_1: left allmulticast mode [ 1131.026308][ T2926] bridge_slave_1: left promiscuous mode [ 1131.034350][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.078723][ T2926] bridge_slave_0: left allmulticast mode [ 1131.089635][ T2926] bridge_slave_0: left promiscuous mode [ 1131.103975][ T49] Bluetooth: hci5: command tx timeout [ 1131.109683][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.448490][ T49] Bluetooth: hci1: command tx timeout [ 1133.007359][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.058582][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.112327][ T2926] bond0 (unregistering): Released all slaves [ 1133.173690][ T49] Bluetooth: hci5: command tx timeout [ 1133.516492][ T2926] hsr_slave_0: left promiscuous mode [ 1133.540272][ T2926] hsr_slave_1: left promiscuous mode [ 1133.574879][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.620441][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.767822][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 1134.533777][ T49] Bluetooth: hci1: command tx timeout [ 1134.634357][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1134.649137][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1134.658565][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1134.713222][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1134.733766][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1134.944629][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 1134.993004][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 1135.256440][ T49] Bluetooth: hci5: command tx timeout [ 1136.310966][ T9721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.345383][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.410248][ T9721] bridge_slave_0: entered allmulticast mode [ 1136.451139][ T9721] bridge_slave_0: entered promiscuous mode [ 1136.489277][ T9721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.523305][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.558242][ T9721] bridge_slave_1: entered allmulticast mode [ 1136.619476][ T9721] bridge_slave_1: entered promiscuous mode [ 1136.891829][ T9776] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 1136.933279][ T49] Bluetooth: hci3: command tx timeout [ 1137.064053][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'. [ 1137.196912][ T9721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.225424][ T9721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.273921][ T9778] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1137.282383][ T9726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.290187][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.298744][ T9726] bridge_slave_0: entered allmulticast mode [ 1137.308923][ T9726] bridge_slave_0: entered promiscuous mode [ 1137.337738][ T9558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.408322][ T9726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.418098][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.427505][ T9726] bridge_slave_1: entered allmulticast mode [ 1137.444509][ T9726] bridge_slave_1: entered promiscuous mode [ 1137.604787][ T9721] team0: Port device team_slave_0 added [ 1137.684684][ T9721] team0: Port device team_slave_1 added [ 1137.768795][ T9726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.802469][ T9558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.920101][ T9726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.033995][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.041421][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.084255][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.091432][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.135479][ T9721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.260150][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.267791][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.328731][ T9721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.401723][ T9726] team0: Port device team_slave_0 added [ 1138.493992][ T9726] team0: Port device team_slave_1 added [ 1138.880237][ T9721] hsr_slave_0: entered promiscuous mode [ 1138.891951][ T9721] hsr_slave_1: entered promiscuous mode [ 1138.976218][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.985226][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.028338][ T49] Bluetooth: hci3: command tx timeout [ 1139.035622][ T9726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.062961][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.070124][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.097896][ T9726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.037096][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1140.459871][ T9763] chnl_net:caif_netlink_parms(): no params data found [ 1141.175651][ T5785] Bluetooth: hci3: command tx timeout [ 1141.475731][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1141.606922][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1141.729075][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1141.789014][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1142.814705][ T9726] hsr_slave_0: entered promiscuous mode [ 1142.872081][ T9726] hsr_slave_1: entered promiscuous mode [ 1142.966035][ T9726] debugfs: 'hsr0' already exists in 'hsr' [ 1142.979072][ T9726] Cannot create hsr debugfs directory [ 1143.428374][ T5785] Bluetooth: hci3: command tx timeout [ 1144.247706][ T5785] Bluetooth: hci0: command tx timeout [ 1145.220495][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 1145.553418][ T9799] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 1145.713879][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.606'. [ 1145.876200][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.889592][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.899099][ T9763] bridge_slave_0: entered allmulticast mode [ 1145.909695][ T9763] bridge_slave_0: entered promiscuous mode [ 1146.022830][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.030401][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.048553][ T9763] bridge_slave_1: entered allmulticast mode [ 1146.074590][ T9763] bridge_slave_1: entered promiscuous mode [ 1146.249549][ T9763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.289847][ T2926] bridge_slave_1: left allmulticast mode [ 1146.299897][ T2926] bridge_slave_1: left promiscuous mode [ 1146.307440][ T5785] Bluetooth: hci0: command tx timeout [ 1146.316598][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.333951][ T2926] bridge_slave_0: left allmulticast mode [ 1146.339756][ T2926] bridge_slave_0: left promiscuous mode [ 1146.347435][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.366556][ T2926] bridge_slave_1: left allmulticast mode [ 1146.372362][ T2926] bridge_slave_1: left promiscuous mode [ 1146.386021][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.396997][ T2926] bridge_slave_0: left allmulticast mode [ 1146.410183][ T2926] bridge_slave_0: left promiscuous mode [ 1146.417926][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.620006][ T9805] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 1146.796288][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.815523][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.849588][ T2926] bond0 (unregistering): Released all slaves [ 1147.019126][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.040456][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.062912][ T2926] bond0 (unregistering): Released all slaves [ 1147.095250][ T9763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.272116][ T9806] bond17: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1147.289987][ T9806] bond17: (slave vxcan9): Error -95 calling set_mac_address [ 1147.336284][ T9807] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1147.483414][ T2926] hsr_slave_0: left promiscuous mode [ 1147.491992][ T2926] hsr_slave_1: left promiscuous mode [ 1147.512388][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.533639][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.564678][ T2926] hsr_slave_0: left promiscuous mode [ 1147.572483][ T2926] hsr_slave_1: left promiscuous mode [ 1147.580930][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.594401][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.888345][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 1147.935012][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 1148.226627][ T9811] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 1148.372827][ T5785] Bluetooth: hci0: command tx timeout [ 1148.522199][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 1148.555484][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 1148.857045][ T9763] team0: Port device team_slave_0 added [ 1149.007610][ T9812] bond18: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1149.023400][ T9812] bond18: (slave vxcan9): Error -95 calling set_mac_address [ 1149.168231][ T9763] team0: Port device team_slave_1 added [ 1149.354724][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.361978][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.399369][ T9763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.514049][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.521222][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.549739][ T9763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.668293][ T9788] chnl_net:caif_netlink_parms(): no params data found [ 1149.875535][ T9818] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 1150.121962][ T9819] bond19: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1150.137574][ T9819] bond19: (slave vxcan9): Error -95 calling set_mac_address [ 1150.186608][ T9763] hsr_slave_0: entered promiscuous mode [ 1150.196544][ T9763] hsr_slave_1: entered promiscuous mode [ 1150.205651][ T9763] debugfs: 'hsr0' already exists in 'hsr' [ 1150.211586][ T9763] Cannot create hsr debugfs directory [ 1150.239265][ T9721] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1150.299553][ T9721] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1150.359580][ T9721] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1150.452915][ T5785] Bluetooth: hci0: command tx timeout [ 1150.540003][ T9721] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1151.266127][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.278101][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.286814][ T9788] bridge_slave_0: entered allmulticast mode [ 1151.297439][ T9788] bridge_slave_0: entered promiscuous mode [ 1151.336561][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.366921][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.376063][ T9788] bridge_slave_1: entered allmulticast mode [ 1151.386872][ T9788] bridge_slave_1: entered promiscuous mode [ 1153.427575][ T9788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.620301][ T9788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.140008][ T9788] team0: Port device team_slave_0 added [ 1154.159471][ T9788] team0: Port device team_slave_1 added [ 1154.171179][ T2926] bridge_slave_1: left allmulticast mode [ 1154.196636][ T2926] bridge_slave_1: left promiscuous mode [ 1154.243165][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.318628][ T2926] bridge_slave_0: left allmulticast mode [ 1154.332392][ T2926] bridge_slave_0: left promiscuous mode [ 1154.360560][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.613513][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1155.785746][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.982394][ T2926] bond0 (unregistering): Released all slaves [ 1156.568726][ T2926] hsr_slave_0: left promiscuous mode [ 1156.581908][ T2926] hsr_slave_1: left promiscuous mode [ 1156.590762][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.601698][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.987454][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 1158.050230][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 1159.430013][ T9726] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1159.487545][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.517023][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.563298][ T9788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.581301][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.589813][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.631381][ T9788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.683355][ T9726] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1159.771786][ T9726] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1159.883454][ T9726] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1160.221393][ T9852] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 1160.277593][ T9788] hsr_slave_0: entered promiscuous mode [ 1160.288810][ T9788] hsr_slave_1: entered promiscuous mode [ 1160.297930][ T9788] debugfs: 'hsr0' already exists in 'hsr' [ 1160.306132][ T9788] Cannot create hsr debugfs directory [ 1160.368079][ T9854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'. [ 1160.449402][ T9853] bond20: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1160.467219][ T9853] bond20: (slave vxcan9): Error -95 calling set_mac_address [ 1160.854338][ T9721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.012204][ T9763] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1161.050655][ T9763] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1161.081137][ T9763] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1161.219715][ T9763] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1161.701210][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.951043][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.958753][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.158482][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.166007][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.654951][ T9862] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 1162.710212][ T9788] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1162.810110][ T9865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'. [ 1162.852177][ T9788] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1162.914404][ T9863] bond21: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1162.928745][ T9863] bond21: (slave vxcan9): Error -95 calling set_mac_address [ 1163.045311][ T9788] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1163.108066][ T9788] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1163.269105][ T9726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.589363][ T9726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.805265][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.813033][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.939851][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.947572][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.057609][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.536781][ T9874] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 1164.554722][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.728103][ T9875] bond22: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1164.742154][ T9875] bond22: (slave vxcan9): Error -95 calling set_mac_address [ 1164.868571][ T9874] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1164.904618][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.912036][ T6236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.977365][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.025226][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.033193][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.267337][ T9788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.589166][ T9788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.920032][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.927697][ T8483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.001180][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.008834][ T8483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.155396][ T9788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1167.850763][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.282033][ T9721] veth0_vlan: entered promiscuous mode [ 1168.483827][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.538202][ T9721] veth1_vlan: entered promiscuous mode [ 1169.242253][ T9788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.346658][ T9721] veth0_macvtap: entered promiscuous mode [ 1169.477759][ T9721] veth1_macvtap: entered promiscuous mode [ 1169.800760][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.940649][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.192876][ T8718] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.291143][ T146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.333192][ T146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.342352][ T146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.053643][ T9726] veth0_vlan: entered promiscuous mode [ 1171.315420][ T9726] veth1_vlan: entered promiscuous mode [ 1171.761387][ T9763] veth0_vlan: entered promiscuous mode [ 1172.011744][ T9763] veth1_vlan: entered promiscuous mode [ 1172.188807][ T9726] veth0_macvtap: entered promiscuous mode [ 1172.297600][ T9726] veth1_macvtap: entered promiscuous mode [ 1172.693081][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.885497][ T9788] veth0_vlan: entered promiscuous mode [ 1172.916606][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.031239][ T9763] veth0_macvtap: entered promiscuous mode [ 1173.147573][ T9346] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.196466][ T9346] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.265743][ T9763] veth1_macvtap: entered promiscuous mode [ 1173.288557][ T9346] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.313244][ T9346] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.370303][ T9788] veth1_vlan: entered promiscuous mode [ 1173.801818][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.958089][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.171174][ T162] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.229700][ T162] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.320134][ T162] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.340466][ T162] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.384998][ T9788] veth0_macvtap: entered promiscuous mode [ 1174.518689][ T9788] veth1_macvtap: entered promiscuous mode [ 1174.810950][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.986567][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.281133][ T162] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.334593][ T162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.441394][ T162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.474687][ T162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.616698][ T9346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.693542][ T9346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.868946][ T9997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1178.937821][ T9346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.979941][ T9346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.349849][ T8718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.463015][ T8718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.761523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.796220][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.131961][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.139865][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.082181][ T9986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.152882][ T9986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.333220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.341330][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.766839][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.802765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.811891][T10076] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 1189.479397][T10078] bond23: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1189.532722][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1189.566320][T10078] bond23: (slave vxcan9): Error -95 calling set_mac_address [ 1189.576742][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1189.593088][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1189.614684][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1189.643609][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1189.795559][T10080] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1190.101625][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.165236][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.742900][ T5785] Bluetooth: hci2: command tx timeout [ 1193.813892][ T5785] Bluetooth: hci2: command tx timeout [ 1195.257679][T10117] kAFS: unable to lookup cell '' [ 1195.892763][ T5785] Bluetooth: hci2: command tx timeout [ 1197.128350][ T9986] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.319308][T10123] netlink: 'syz.5.638': attribute type 1 has an invalid length. [ 1197.978064][ T5785] Bluetooth: hci2: command tx timeout [ 1201.952079][ T9986] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.440064][T10140] netlink: 'syz.6.642': attribute type 1 has an invalid length. [ 1202.678451][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.6.642'. [ 1204.021501][ T9986] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.223349][T10083] chnl_net:caif_netlink_parms(): no params data found [ 1204.638329][ T9986] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.790230][T10158] netlink: 'syz.5.645': attribute type 1 has an invalid length. [ 1205.449246][T10167] kAFS: unable to lookup cell '' [ 1205.741150][T10167] vivid-000: disconnect [ 1206.091969][T10162] vivid-000: reconnect [ 1207.757305][ T9986] bridge_slave_1: left allmulticast mode [ 1207.807853][ T9986] bridge_slave_1: left promiscuous mode [ 1207.833789][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.924173][ T9986] bridge_slave_0: left allmulticast mode [ 1207.961979][ T9986] bridge_slave_0: left promiscuous mode [ 1208.039546][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.966633][T10204] kAFS: unable to lookup cell '' [ 1210.991862][T10204] vivid-003: disconnect [ 1211.374739][T10196] vivid-003: reconnect [ 1213.265726][ T9986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.414736][ T9986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.583233][T10214] vivid-000: disconnect [ 1213.615512][T10210] vivid-000: reconnect [ 1213.647915][ T9986] bond0 (unregistering): Released all slaves [ 1214.188518][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.232967][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.240958][T10083] bridge_slave_0: entered allmulticast mode [ 1214.421662][T10083] bridge_slave_0: entered promiscuous mode [ 1214.787624][T10083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.819677][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.881514][T10083] bridge_slave_1: entered allmulticast mode [ 1214.940424][T10083] bridge_slave_1: entered promiscuous mode [ 1215.150019][T10239] vivid-003: disconnect [ 1215.708736][T10230] vivid-003: reconnect [ 1217.228624][T10083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.865729][T10083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.093083][ T9986] hsr_slave_0: left promiscuous mode [ 1222.203003][ T9986] hsr_slave_1: left promiscuous mode [ 1222.217179][ T9986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.247757][ T9986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.355917][ T9986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.385540][ T9986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.602444][ T9986] veth1_macvtap: left promiscuous mode [ 1222.682905][ T9986] veth0_macvtap: left promiscuous mode [ 1222.688738][ T9986] veth1_vlan: left promiscuous mode [ 1222.775902][ T9986] veth0_vlan: left promiscuous mode [ 1222.935853][T10261] kAFS: unable to lookup cell '' [ 1222.950541][T10261] vivid-000: disconnect [ 1223.641984][T10256] vivid-000: reconnect [ 1225.623813][T10276] vivid-000: disconnect [ 1225.998065][T10273] vivid-000: reconnect [ 1226.182672][T10278] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 1226.768165][T10284] kAFS: unable to lookup cell '' [ 1226.787464][T10284] vivid-003: disconnect [ 1227.173793][ T9986] team0 (unregistering): Port device team_slave_1 removed [ 1227.448025][T10281] vivid-003: reconnect [ 1227.624520][ T9986] team0 (unregistering): Port device team_slave_0 removed [ 1228.484890][T10289] vivid-000: disconnect [ 1228.842059][T10285] vivid-000: reconnect [ 1230.370955][T10294] vivid-003: disconnect [ 1230.820029][T10290] vivid-003: reconnect [ 1231.011795][T10278] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 1232.144428][T10300] vivid-000: disconnect [ 1232.942826][T10295] vivid-000: reconnect [ 1233.177604][T10083] team0: Port device team_slave_0 added [ 1233.287520][T10083] team0: Port device team_slave_1 added [ 1235.120246][T10315] vivid-003: disconnect [ 1235.277742][T10303] vivid-003: reconnect [ 1237.502229][T10083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.811047][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.069057][T10083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.111865][T10083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.123261][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.150187][T10083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.015551][T10083] hsr_slave_0: entered promiscuous mode [ 1243.064310][T10083] hsr_slave_1: entered promiscuous mode [ 1243.125903][T10083] debugfs: 'hsr0' already exists in 'hsr' [ 1243.131873][T10083] Cannot create hsr debugfs directory [ 1244.998434][T10350] vivid-001: disconnect [ 1245.595839][T10343] vivid-001: reconnect [ 1246.177357][T10358] kAFS: unable to lookup cell '' [ 1248.558140][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.565990][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.079395][T10376] netlink: 'syz.7.695': attribute type 1 has an invalid length. [ 1250.199500][T10379] netlink: 28 bytes leftover after parsing attributes in process `syz.7.695'. [ 1250.643444][T10364] Bluetooth: hci1: command 0x0406 tx timeout [ 1255.029041][T10391] vivid-000: disconnect [ 1255.381283][T10385] vivid-000: reconnect [ 1257.124111][T10364] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1257.133274][T10364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1257.144311][T10364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1257.171325][T10364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1257.188270][T10364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1259.256154][ T5785] Bluetooth: hci5: command tx timeout [ 1261.077051][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 1261.333148][T10364] Bluetooth: hci5: command tx timeout [ 1261.583164][ T8483] bridge_slave_1: left allmulticast mode [ 1261.589145][ T8483] bridge_slave_1: left promiscuous mode [ 1261.660699][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.990814][ T8483] bridge_slave_0: left allmulticast mode [ 1262.085723][ T8483] bridge_slave_0: left promiscuous mode [ 1262.213651][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.534673][T10435] netlink: 'syz.6.706': attribute type 1 has an invalid length. [ 1263.413895][ T5785] Bluetooth: hci5: command tx timeout [ 1263.720028][T10448] vivid-000: disconnect [ 1264.019401][T10434] vivid-000: reconnect [ 1265.660893][T10364] Bluetooth: hci5: command tx timeout [ 1265.734541][T10454] kAFS: unable to lookup cell '' [ 1265.831738][T10455] vivid-000: disconnect [ 1266.240135][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 1266.755423][T10450] vivid-000: reconnect [ 1267.312330][ T8483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.411721][ T8483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.508479][ T8483] bond0 (unregistering): Released all slaves [ 1267.966228][T10435] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1269.447364][T10478] kAFS: unable to lookup cell '' [ 1269.774991][T10481] vivid-000: disconnect [ 1270.035367][ T8483] hsr_slave_0: left promiscuous mode [ 1270.141568][ T8483] hsr_slave_1: left promiscuous mode [ 1270.313135][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.425283][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.455684][T10472] vivid-000: reconnect [ 1272.271894][T10496] kAFS: unable to lookup cell '' [ 1272.387288][T10497] vivid-001: disconnect [ 1273.285942][T10493] vivid-001: reconnect [ 1276.790094][ T8483] team0 (unregistering): Port device team_slave_1 removed [ 1277.351791][ T8483] team0 (unregistering): Port device team_slave_0 removed [ 1279.130854][T10522] vivid-000: disconnect [ 1279.863402][T10520] vivid-000: reconnect [ 1281.424091][T10537] kAFS: unable to lookup cell '' [ 1281.484072][T10531] vivid-003: disconnect [ 1281.498704][T10542] vivid-000: disconnect [ 1281.825679][T10530] vivid-003: reconnect [ 1281.951967][T10534] vivid-000: reconnect [ 1282.283660][T10400] chnl_net:caif_netlink_parms(): no params data found [ 1284.013502][T10560] kAFS: unable to lookup cell '' [ 1284.193139][T10561] vivid-000: disconnect [ 1285.154293][T10554] vivid-000: reconnect [ 1295.397308][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.405227][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.877247][T10400] bridge_slave_0: entered allmulticast mode [ 1295.998466][T10400] bridge_slave_0: entered promiscuous mode [ 1296.274407][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.281993][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.393419][T10400] bridge_slave_1: entered allmulticast mode [ 1296.472778][T10400] bridge_slave_1: entered promiscuous mode [ 1300.075214][T10606] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1300.281526][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.951281][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.427396][T10611] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 1304.624167][T10400] team0: Port device team_slave_0 added [ 1305.575990][T10400] team0: Port device team_slave_1 added [ 1307.920114][T10637] kAFS: unable to lookup cell '' [ 1308.009082][T10639] vivid-000: disconnect [ 1308.974638][T10632] vivid-000: reconnect [ 1310.020238][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.048242][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.386921][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.503908][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.026882][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.159272][T10364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1314.166509][T10364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1314.168853][T10364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1314.175743][T10364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1314.179152][T10364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1314.486790][T10675] kAFS: unable to lookup cell '' [ 1314.746320][T10676] vivid-001: disconnect [ 1315.229759][T10667] vivid-001: reconnect [ 1316.212993][ T5785] Bluetooth: hci2: command tx timeout [ 1316.413291][T10684] netlink: 'syz.7.756': attribute type 1 has an invalid length. [ 1316.699601][T10690] netlink: 'syz.6.758': attribute type 1 has an invalid length. [ 1316.853925][T10691] netlink: 24 bytes leftover after parsing attributes in process `syz.7.756'. [ 1317.016649][T10693] netlink: 24 bytes leftover after parsing attributes in process `syz.6.758'. [ 1317.486310][T10689] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1317.712313][T10689] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1318.292865][ T5785] Bluetooth: hci2: command tx timeout [ 1318.941708][T10692] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1318.975345][T10692] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1319.087895][T10691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1319.337127][T10693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1320.609944][ T5785] Bluetooth: hci2: command tx timeout [ 1323.282852][ T5785] Bluetooth: hci2: command tx timeout [ 1324.777807][ T6236] bridge_slave_1: left allmulticast mode [ 1324.792644][ T6236] bridge_slave_1: left promiscuous mode [ 1324.799451][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.969399][ T6236] bridge_slave_0: left allmulticast mode [ 1325.074836][ T6236] bridge_slave_0: left promiscuous mode [ 1325.226880][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.982887][T10738] kAFS: unable to lookup cell '' [ 1326.070815][T10739] vivid-000: disconnect [ 1326.538193][T10733] vivid-000: reconnect [ 1326.565928][ T6236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.831870][ T6236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.975284][ T6236] bond0 (unregistering): Released all slaves [ 1327.662882][ T6236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.564754][ T6236] team0 (unregistering): Port device team_slave_1 removed [ 1330.858704][ T6236] team0 (unregistering): Port device team_slave_0 removed [ 1338.926851][T10669] chnl_net:caif_netlink_parms(): no params data found [ 1344.154867][T10816] vivid-000: disconnect [ 1345.012338][T10812] vivid-000: reconnect [ 1352.929250][T10669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.003164][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.048903][T10669] bridge_slave_0: entered allmulticast mode [ 1353.267549][T10669] bridge_slave_0: entered promiscuous mode [ 1354.089217][T10669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.194949][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.250884][T10669] bridge_slave_1: entered allmulticast mode [ 1354.317337][T10669] bridge_slave_1: entered promiscuous mode [ 1354.826137][T10669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.053051][T10669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.196582][T10669] team0: Port device team_slave_0 added [ 1361.499347][T10669] team0: Port device team_slave_1 added [ 1362.040679][T10889] kAFS: unable to lookup cell '' [ 1362.128558][T10890] vivid-003: disconnect [ 1363.242761][T10885] vivid-003: reconnect [ 1363.453933][T10891] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 1363.499066][T10669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.553645][T10669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.611242][T10669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.640140][T10669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.684862][T10669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.770083][T10669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.367177][T10902] netlink: 'syz.7.801': attribute type 1 has an invalid length. [ 1364.466952][T10669] hsr_slave_0: entered promiscuous mode [ 1364.484602][T10669] hsr_slave_1: entered promiscuous mode [ 1364.525938][T10669] debugfs: 'hsr0' already exists in 'hsr' [ 1364.531992][T10669] Cannot create hsr debugfs directory [ 1364.574141][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.7.801'. [ 1366.947688][T10905] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1367.267302][T10905] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1368.124013][T10907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1371.440310][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.447782][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.920605][T10936] kAFS: unable to lookup cell '' [ 1375.133089][T10939] vivid-001: disconnect [ 1375.556594][T10928] vivid-001: reconnect [ 1384.244222][T10364] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1384.255848][T10364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1384.267203][T10364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1384.281602][T10364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1384.434628][T10364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1386.643044][T10364] Bluetooth: hci5: command tx timeout [ 1388.943144][T10364] Bluetooth: hci5: command tx timeout [ 1391.023111][T10364] Bluetooth: hci5: command tx timeout [ 1391.148208][T11008] kAFS: unable to lookup cell '' [ 1391.243049][T11009] vivid-000: disconnect [ 1391.625837][T10998] vivid-000: reconnect [ 1392.249585][ T9986] bridge_slave_1: left allmulticast mode [ 1392.348924][ T9986] bridge_slave_1: left promiscuous mode [ 1392.373561][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.151008][T10364] Bluetooth: hci5: command tx timeout [ 1393.603785][ T9986] bridge_slave_0: left allmulticast mode [ 1393.609678][ T9986] bridge_slave_0: left promiscuous mode [ 1393.623774][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.085038][ T9986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.118166][ T9986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.511992][ T9986] bond0 (unregistering): Released all slaves [ 1400.075359][ T9986] hsr_slave_0: left promiscuous mode [ 1400.166491][ T9986] hsr_slave_1: left promiscuous mode [ 1400.267744][ T9986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.484992][ T9986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.083557][ T9986] team0 (unregistering): Port device team_slave_1 removed [ 1406.965412][ T9986] team0 (unregistering): Port device team_slave_0 removed [ 1407.490472][T11079] 9p: Bad value for 'rfdno' [ 1409.932371][T11089] vivid-001: disconnect [ 1410.088243][T11086] vivid-001: reconnect [ 1413.955562][T11051] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1417.549828][T10977] chnl_net:caif_netlink_parms(): no params data found [ 1417.645411][T11126] kAFS: unable to lookup cell '' [ 1417.715594][T11129] vivid-000: disconnect [ 1417.863610][T11124] vivid-000: reconnect [ 1424.528718][T10977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.529283][T10977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.529864][T10977] bridge_slave_0: entered allmulticast mode [ 1424.535914][T10977] bridge_slave_0: entered promiscuous mode [ 1424.555049][T10977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.555657][T10977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.556234][T10977] bridge_slave_1: entered allmulticast mode [ 1424.586766][T10977] bridge_slave_1: entered promiscuous mode [ 1427.971192][T10977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.021810][T10977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.752178][T10977] team0: Port device team_slave_0 added [ 1428.917998][T10977] team0: Port device team_slave_1 added [ 1429.063181][T11179] kAFS: unable to lookup cell '' [ 1429.215145][T11188] vivid-000: disconnect [ 1429.530432][T10977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.602970][T11178] vivid-000: reconnect [ 1429.631590][T10977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.897314][T10977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.252624][T10977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.337333][T10977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.069933][T10977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.889530][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.778005][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.781086][T11195] 9p: Bad value for 'rfdno' [ 1436.635352][T10977] hsr_slave_0: entered promiscuous mode [ 1436.766497][T10977] hsr_slave_1: entered promiscuous mode [ 1436.844354][T10977] debugfs: 'hsr0' already exists in 'hsr' [ 1436.850252][T10977] Cannot create hsr debugfs directory [ 1439.907937][T11234] 9p: Bad value for 'rfdno' [ 1443.142539][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1443.186968][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1443.230747][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1443.238227][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1443.243119][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1444.323771][T11261] vivid-000: disconnect [ 1444.951198][T11254] vivid-000: reconnect [ 1445.411626][ T5785] Bluetooth: hci2: command tx timeout [ 1448.087841][ T5785] Bluetooth: hci2: command tx timeout [ 1451.118123][ T5785] Bluetooth: hci2: command tx timeout [ 1451.765349][T11278] kAFS: unable to lookup cell '' [ 1451.824056][T11281] vivid-001: disconnect [ 1451.903094][T11275] vivid-001: reconnect [ 1453.087961][ T8718] bridge_slave_1: left allmulticast mode [ 1453.122849][ T8718] bridge_slave_1: left promiscuous mode [ 1453.129633][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.173409][ T5785] Bluetooth: hci2: command tx timeout [ 1453.237253][ T8718] bridge_slave_0: left allmulticast mode [ 1453.276658][ T8718] bridge_slave_0: left promiscuous mode [ 1453.456476][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.860282][ T8718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.163268][T11317] vivid-000: disconnect [ 1459.313125][T11313] vivid-000: reconnect [ 1460.919724][ T8718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.114467][ T8718] bond0 (unregistering): Released all slaves [ 1461.372847][T11314] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1462.074949][T11329] 9p: Bad value for 'rfdno' [ 1463.921842][ T8718] hsr_slave_0: left promiscuous mode [ 1464.126228][ T8718] hsr_slave_1: left promiscuous mode [ 1464.194836][ T8718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.282757][ T8718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.449964][ T8718] team0 (unregistering): Port device team_slave_1 removed [ 1468.752157][ T8718] team0 (unregistering): Port device team_slave_0 removed [ 1470.346155][T11250] chnl_net:caif_netlink_parms(): no params data found [ 1472.451159][T11380] vivid-000: disconnect [ 1472.638295][T11374] vivid-000: reconnect [ 1480.169663][T11402] 9p: Bad value for 'rfdno' [ 1486.062751][T11250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.102675][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.110585][T11250] bridge_slave_0: entered allmulticast mode [ 1486.165696][T11250] bridge_slave_0: entered promiscuous mode [ 1486.285395][T11250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.343420][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.393840][T11250] bridge_slave_1: entered allmulticast mode [ 1486.527623][T11250] bridge_slave_1: entered promiscuous mode [ 1489.356057][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.210879][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.317485][T11250] team0: Port device team_slave_0 added [ 1491.337011][T11250] team0: Port device team_slave_1 added [ 1491.653462][T11449] kAFS: unable to lookup cell '' [ 1491.683515][T11250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.691215][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.759540][T11454] vivid-000: disconnect [ 1491.772772][T11250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.843777][T11448] vivid-000: reconnect [ 1491.858859][T11250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.884084][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.974591][T11250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.816325][T11250] hsr_slave_0: entered promiscuous mode [ 1494.325547][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.607036][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.966780][T11250] hsr_slave_1: entered promiscuous mode [ 1495.023319][T11250] debugfs: 'hsr0' already exists in 'hsr' [ 1495.029297][T11250] Cannot create hsr debugfs directory [ 1496.167516][T11459] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1501.130598][T11477] 9p: Bad value for 'rfdno' [ 1501.360992][T11482] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1503.601011][T11510] vivid-003: disconnect [ 1504.565061][T11501] vivid-003: reconnect [ 1510.947742][T10364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1510.964961][T10364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1510.975404][T10364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1510.981463][T10364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1510.990334][T10364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1511.209433][T11538] netlink: 'syz.6.928': attribute type 1 has an invalid length. [ 1512.479398][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.928'. [ 1512.618318][ T9986] bridge_slave_1: left allmulticast mode [ 1512.618440][ T9986] bridge_slave_1: left promiscuous mode [ 1512.619235][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.650177][ T9986] bridge_slave_0: left allmulticast mode [ 1512.650288][ T9986] bridge_slave_0: left promiscuous mode [ 1512.651253][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.122931][T10364] Bluetooth: hci2: command tx timeout [ 1515.382747][T10364] Bluetooth: hci2: command tx timeout [ 1515.758276][T11570] vivid-000: disconnect [ 1516.320969][T11565] vivid-000: reconnect [ 1516.746694][ T9986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.883105][ T9986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.967261][ T9986] bond0 (unregistering): Released all slaves [ 1517.307477][T11541] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1517.381910][T11541] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1517.412983][T10364] Bluetooth: hci2: command tx timeout [ 1519.552874][T10364] Bluetooth: hci2: command tx timeout [ 1523.365856][ T9986] hsr_slave_0: left promiscuous mode [ 1524.546771][ T9986] hsr_slave_1: left promiscuous mode [ 1525.328869][ T9986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.330226][T11594] kAFS: unparsable volume name [ 1525.369050][ T9986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.443313][T11588] vivid-003: disconnect [ 1525.452843][T11587] vivid-003: reconnect [ 1526.246772][ T9986] team0 (unregistering): Port device team_slave_1 removed [ 1526.339010][ T9986] team0 (unregistering): Port device team_slave_0 removed [ 1533.210203][T11575] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1542.643512][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1542.673541][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1542.683319][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1542.699459][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1542.714269][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1544.775475][T10364] Bluetooth: hci5: command tx timeout [ 1545.123750][T11533] chnl_net:caif_netlink_parms(): no params data found [ 1546.950113][T10364] Bluetooth: hci5: command tx timeout [ 1549.012849][T10364] Bluetooth: hci5: command tx timeout [ 1551.102703][T10364] Bluetooth: hci5: command tx timeout [ 1552.370131][T11533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.380436][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.395642][T11533] bridge_slave_0: entered allmulticast mode [ 1552.407983][T11533] bridge_slave_0: entered promiscuous mode [ 1552.519161][T11533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.577338][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.658626][T11533] bridge_slave_1: entered allmulticast mode [ 1552.785373][T11533] bridge_slave_1: entered promiscuous mode [ 1552.840604][T11623] chnl_net:caif_netlink_parms(): no params data found [ 1553.656545][T11533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.746695][T11533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.262655][T11687] 9p: Bad value for 'rfdno' [ 1554.301380][T11688] vivid-001: disconnect [ 1554.420217][T11682] vivid-001: reconnect [ 1554.821562][T11533] team0: Port device team_slave_0 added [ 1554.928923][T11533] team0: Port device team_slave_1 added [ 1555.757023][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.763925][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.257395][T11533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.391470][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.825856][T11533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.487945][T11533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.559791][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.986020][T11533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.679336][T11533] hsr_slave_0: entered promiscuous mode [ 1560.997516][T11533] hsr_slave_1: entered promiscuous mode [ 1561.295718][T11533] debugfs: 'hsr0' already exists in 'hsr' [ 1561.381048][T11533] Cannot create hsr debugfs directory [ 1561.640005][T11623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.755989][T11623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.833723][T11623] bridge_slave_0: entered allmulticast mode [ 1561.850707][T11623] bridge_slave_0: entered promiscuous mode [ 1561.896226][T11623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.943294][T11623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.032830][T11623] bridge_slave_1: entered allmulticast mode [ 1562.096067][T11623] bridge_slave_1: entered promiscuous mode [ 1567.246164][T11623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.268763][T11623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.702683][T11727] vivid-001: disconnect [ 1567.728458][T11724] vivid-001: reconnect [ 1567.996473][T11623] team0: Port device team_slave_0 added [ 1568.134723][T11623] team0: Port device team_slave_1 added [ 1568.287141][T11733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1568.326024][T11733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1568.338907][T11733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1568.365683][T11733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1568.404779][T11733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1568.753239][T11623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.760409][T11623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.659999][T11623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.801607][T11738] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1569.939026][T11623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.305997][T11623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.710002][T10364] Bluetooth: hci3: command tx timeout [ 1570.965341][T11623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1573.034121][T10364] Bluetooth: hci3: command tx timeout [ 1573.950382][T11623] hsr_slave_0: entered promiscuous mode [ 1573.990205][T11623] hsr_slave_1: entered promiscuous mode [ 1574.024719][T11623] debugfs: 'hsr0' already exists in 'hsr' [ 1574.030841][T11623] Cannot create hsr debugfs directory [ 1575.123995][T11733] Bluetooth: hci3: command tx timeout [ 1577.230594][T11733] Bluetooth: hci3: command tx timeout [ 1577.866204][T11771] vivid-001: disconnect [ 1577.905093][T11770] vivid-001: reconnect [ 1578.981530][ T56] bridge_slave_1: left allmulticast mode [ 1578.992579][ T56] bridge_slave_1: left promiscuous mode [ 1578.999300][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.037195][ T56] bridge_slave_0: left allmulticast mode [ 1579.995628][ T56] bridge_slave_0: left promiscuous mode [ 1579.999562][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.377405][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.457898][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.519422][ T56] bond0 (unregistering): Released all slaves [ 1582.964387][T11787] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1583.121337][ T56] hsr_slave_0: left promiscuous mode [ 1583.278084][ T56] hsr_slave_1: left promiscuous mode [ 1583.401623][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.926676][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.710967][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1589.320378][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1594.338890][T11732] chnl_net:caif_netlink_parms(): no params data found [ 1597.855852][T11856] kAFS: unable to lookup cell '' [ 1597.956696][T11859] vivid-001: disconnect [ 1598.534177][T11852] vivid-001: reconnect [ 1601.513068][T11732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.531537][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.559316][T10364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1601.572217][T10364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1601.581709][T11732] bridge_slave_0: entered allmulticast mode [ 1601.588839][T10364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1601.620555][T11732] bridge_slave_0: entered promiscuous mode [ 1601.663821][T10364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1601.708075][T10364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1601.836463][T11732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.881097][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.029277][T11732] bridge_slave_1: entered allmulticast mode [ 1602.058081][T11732] bridge_slave_1: entered promiscuous mode [ 1602.468619][T11732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.675682][T11732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.812729][T11733] Bluetooth: hci2: command tx timeout [ 1605.893552][T11733] Bluetooth: hci2: command tx timeout [ 1608.314724][T11733] Bluetooth: hci2: command tx timeout [ 1608.386877][T11732] team0: Port device team_slave_0 added [ 1608.418202][T11732] team0: Port device team_slave_1 added [ 1609.015441][T11732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.015527][T11732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.015687][T11732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.108221][T11732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.108306][T11732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.108471][T11732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.373123][T11733] Bluetooth: hci2: command tx timeout [ 1611.738676][T11732] hsr_slave_0: entered promiscuous mode [ 1611.769275][T11732] hsr_slave_1: entered promiscuous mode [ 1611.828014][T11732] debugfs: 'hsr0' already exists in 'hsr' [ 1611.887592][T11732] Cannot create hsr debugfs directory [ 1612.016074][T11893] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1615.349009][T11917] vivid-001: disconnect [ 1615.411815][T11915] vivid-001: reconnect [ 1616.813756][T11863] chnl_net:caif_netlink_parms(): no params data found [ 1616.915279][T11922] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1617.193752][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.194048][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1619.529168][ T2926] bridge_slave_1: left allmulticast mode [ 1619.546208][ T2926] bridge_slave_1: left promiscuous mode [ 1619.564949][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.707599][ T2926] bridge_slave_0: left allmulticast mode [ 1619.749926][ T2926] bridge_slave_0: left promiscuous mode [ 1619.803525][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.850806][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.011697][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.081491][ T2926] bond0 (unregistering): Released all slaves [ 1622.739151][ T2926] hsr_slave_0: left promiscuous mode [ 1622.851144][ T2926] hsr_slave_1: left promiscuous mode [ 1622.889366][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.955038][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.989001][T11965] vivid-003: disconnect [ 1623.190723][T11961] vivid-003: reconnect [ 1623.974023][T11969] netlink: 'syz.6.1028': attribute type 1 has an invalid length. [ 1624.159396][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 1624.629189][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 1624.784283][T11973] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1028'. [ 1626.121309][T11971] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1626.183143][T11971] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1626.566125][T11973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1627.739881][T11863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.773029][T11863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.780702][T11863] bridge_slave_0: entered allmulticast mode [ 1627.857090][T11863] bridge_slave_0: entered promiscuous mode [ 1627.919826][T11863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.940926][T11863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.984845][T11863] bridge_slave_1: entered allmulticast mode [ 1628.037501][T11863] bridge_slave_1: entered promiscuous mode [ 1628.311750][T11863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.380405][T11863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.547885][T11863] team0: Port device team_slave_0 added [ 1628.590601][T11863] team0: Port device team_slave_1 added [ 1628.730894][T11863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1628.744878][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.779483][T11863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1628.844663][T11863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.851772][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.880909][T11863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.099858][T11863] hsr_slave_0: entered promiscuous mode [ 1629.110873][T11863] hsr_slave_1: entered promiscuous mode [ 1629.121996][T11863] debugfs: 'hsr0' already exists in 'hsr' [ 1629.145025][T11863] Cannot create hsr debugfs directory [ 1631.576305][T12000] kAFS: unable to lookup cell '' [ 1634.369306][T10364] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1634.394361][T10364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1634.425358][T10364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1634.486762][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1634.523421][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1636.692635][ T5785] Bluetooth: hci5: command tx timeout [ 1638.774788][ T5785] Bluetooth: hci5: command tx timeout [ 1639.550619][ T162] bridge_slave_1: left allmulticast mode [ 1639.591509][ T162] bridge_slave_1: left promiscuous mode [ 1639.673252][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.851576][ T162] bridge_slave_0: left allmulticast mode [ 1639.851696][ T162] bridge_slave_0: left promiscuous mode [ 1639.857897][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.062628][ T5785] Bluetooth: hci5: command tx timeout [ 1643.120648][T11733] Bluetooth: hci5: command tx timeout [ 1647.179675][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1648.381347][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.161290][T12055] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1650.228918][ T162] bond0 (unregistering): Released all slaves [ 1651.215183][T12052] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1654.667064][T11863] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1655.465433][T12072] 9p: Bad value for 'rfdno' [ 1658.701649][ T162] hsr_slave_0: left promiscuous mode [ 1659.469939][ T162] hsr_slave_1: left promiscuous mode [ 1659.677650][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.124878][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.167594][ T162] team0 (unregistering): Port device team_slave_1 removed [ 1664.309840][ T162] team0 (unregistering): Port device team_slave_0 removed [ 1664.342125][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1664.350623][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1664.365447][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1664.400400][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1664.415995][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1665.009762][T11863] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1665.164305][T12093] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1665.419566][T12107] netlink: 'syz.5.1053': attribute type 1 has an invalid length. [ 1665.926051][T12110] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1053'. [ 1666.117108][T12114] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 1666.377520][T12110] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1666.443613][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'. [ 1666.489674][ T5785] Bluetooth: hci3: command tx timeout [ 1667.716342][T12118] bond27: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1667.825880][T12118] bond27: (slave vxcan9): Error -95 calling set_mac_address [ 1668.014805][T12003] chnl_net:caif_netlink_parms(): no params data found [ 1668.543278][ T5785] Bluetooth: hci3: command tx timeout [ 1670.024154][T12120] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1670.613013][ T5785] Bluetooth: hci3: command tx timeout [ 1672.696904][ T5785] Bluetooth: hci3: command tx timeout [ 1673.280535][T12146] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1678.142910][T12165] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1678.649004][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.687987][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.756598][T12163] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR [ 1679.519677][T12099] chnl_net:caif_netlink_parms(): no params data found [ 1680.771100][T12183] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR [ 1681.446538][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.553124][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.561044][T12003] bridge_slave_0: entered allmulticast mode [ 1681.636835][T12003] bridge_slave_0: entered promiscuous mode [ 1682.387184][T12201] vivid-000: disconnect [ 1682.678499][T12191] vivid-000: reconnect [ 1682.761778][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.793045][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.805066][T12003] bridge_slave_1: entered allmulticast mode [ 1682.817808][T12003] bridge_slave_1: entered promiscuous mode [ 1683.199359][T12003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.490464][T12003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.920248][T12003] team0: Port device team_slave_0 added [ 1685.006644][T12003] team0: Port device team_slave_1 added [ 1685.415272][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.473023][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.503217][T12099] bridge_slave_0: entered allmulticast mode [ 1685.650822][T12099] bridge_slave_0: entered promiscuous mode [ 1686.037574][T12226] 9p: Bad value for 'rfdno' [ 1686.213202][ T6983] bridge_slave_1: left allmulticast mode [ 1686.360299][ T6983] bridge_slave_1: left promiscuous mode [ 1686.473465][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.613862][ T6983] bridge_slave_0: left allmulticast mode [ 1686.619778][ T6983] bridge_slave_0: left promiscuous mode [ 1686.703546][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.204316][ T6983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.365110][ T6983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.409302][ T6983] bond0 (unregistering): Released all slaves [ 1693.630857][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.640712][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.689743][T12099] bridge_slave_1: entered allmulticast mode [ 1693.757628][T12099] bridge_slave_1: entered promiscuous mode [ 1694.087531][ T6983] hsr_slave_0: left promiscuous mode [ 1694.114539][ T6983] hsr_slave_1: left promiscuous mode [ 1694.123931][ T6983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.138164][ T6983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.625785][ T6983] team0 (unregistering): Port device team_slave_1 removed [ 1694.670348][ T6983] team0 (unregistering): Port device team_slave_0 removed [ 1695.518662][T12254] vivid-000: disconnect [ 1695.601560][T12250] vivid-001: disconnect [ 1696.275940][T12247] vivid-001: reconnect [ 1696.362142][T12249] vivid-000: reconnect [ 1696.830536][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.933476][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1079'. [ 1697.143233][T11733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1697.155569][T11733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1697.166132][T11733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1697.189028][T11733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1697.220623][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.239922][T11733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1697.659404][T12099] team0: Port device team_slave_0 added [ 1697.906556][T12099] team0: Port device team_slave_1 added [ 1699.188116][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.238301][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.352225][T11733] Bluetooth: hci2: command tx timeout [ 1699.655794][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.768132][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.797335][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.929137][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.011357][ T6983] bridge_slave_1: left allmulticast mode [ 1700.028805][ T6983] bridge_slave_1: left promiscuous mode [ 1700.044875][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.189598][ T6983] bridge_slave_0: left allmulticast mode [ 1700.207963][ T6983] bridge_slave_0: left promiscuous mode [ 1700.273525][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.001912][ T6983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1701.413185][T11733] Bluetooth: hci2: command tx timeout [ 1701.624409][ T6983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.105394][ T6983] bond0 (unregistering): Released all slaves [ 1702.533153][T12295] vivid-001: disconnect [ 1702.966077][T12289] vivid-001: reconnect [ 1703.500443][T11733] Bluetooth: hci2: command tx timeout [ 1703.898779][ T6983] team0 (unregistering): Port device team_slave_1 removed [ 1705.309687][ T6983] team0 (unregistering): Port device team_slave_0 removed [ 1705.572760][T11733] Bluetooth: hci2: command tx timeout [ 1707.478230][T12311] vivid-000: disconnect [ 1708.014803][T12308] vivid-000: reconnect [ 1708.581858][T12099] hsr_slave_0: entered promiscuous mode [ 1708.649014][T12099] hsr_slave_1: entered promiscuous mode [ 1708.688346][T12099] debugfs: 'hsr0' already exists in 'hsr' [ 1708.748548][T12099] Cannot create hsr debugfs directory [ 1709.656879][T12327] vivid-000: disconnect [ 1710.383273][T12318] vivid-000: reconnect [ 1710.493708][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1090'. [ 1713.355798][T12349] netlink: 'syz.6.1094': attribute type 1 has an invalid length. [ 1713.704573][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1094'. [ 1714.103819][T12351] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1714.149900][T12351] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1715.464153][T12354] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1715.781894][T12366] vivid-001: disconnect [ 1716.306749][T12362] vivid-001: reconnect [ 1716.475503][T12260] chnl_net:caif_netlink_parms(): no params data found [ 1717.191858][T12376] kAFS: unable to lookup cell '' [ 1717.973533][T12382] vivid-000: disconnect [ 1718.560826][T12370] vivid-000: reconnect [ 1723.948077][T12260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.003334][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.011339][T12260] bridge_slave_0: entered allmulticast mode [ 1724.088569][T12260] bridge_slave_0: entered promiscuous mode [ 1724.155753][T12260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.189953][T12260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.200676][T12260] bridge_slave_1: entered allmulticast mode [ 1724.265250][T12260] bridge_slave_1: entered promiscuous mode [ 1725.741062][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1725.758968][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1725.771991][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1725.790135][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1725.858074][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1727.667404][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.972921][ T5785] Bluetooth: hci5: command tx timeout [ 1728.058051][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.821589][T12260] team0: Port device team_slave_0 added [ 1730.036043][T12260] team0: Port device team_slave_1 added [ 1730.064479][ T5785] Bluetooth: hci5: command tx timeout [ 1730.749452][T12432] vivid-000: disconnect [ 1731.246372][T12428] vivid-000: reconnect [ 1731.400172][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1731.493019][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.594997][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1731.684155][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.723296][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.776723][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.201185][ T5785] Bluetooth: hci5: command tx timeout [ 1732.475828][T12439] vivid-003: disconnect [ 1732.791469][T12434] vivid-003: reconnect [ 1734.212750][ T5785] Bluetooth: hci5: command tx timeout [ 1734.914972][T12450] vivid-000: disconnect [ 1734.960412][T12446] vivid-000: reconnect [ 1736.078793][T12260] hsr_slave_0: entered promiscuous mode [ 1736.160929][T12260] hsr_slave_1: entered promiscuous mode [ 1736.194544][T12458] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 1736.207162][T12260] debugfs: 'hsr0' already exists in 'hsr' [ 1736.236220][T12260] Cannot create hsr debugfs directory [ 1736.466314][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'. [ 1740.630720][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.698644][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.872515][T12458] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR [ 1741.760517][T12476] vivid-003: disconnect [ 1742.179705][T12472] vivid-003: reconnect [ 1744.147685][T12414] chnl_net:caif_netlink_parms(): no params data found [ 1745.394923][T12491] vivid-003: disconnect [ 1745.579984][T12486] vivid-003: reconnect [ 1747.469725][T12500] vivid-000: disconnect [ 1747.476755][T12498] vivid-000: reconnect [ 1747.656537][T12496] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1748.831700][T11814] bridge_slave_1: left allmulticast mode [ 1749.088598][T11814] bridge_slave_1: left promiscuous mode [ 1749.095822][T11814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.289711][T12517] kAFS: unable to lookup cell '' [ 1749.700468][T12519] vivid-001: disconnect [ 1749.971120][T11814] bridge_slave_0: left allmulticast mode [ 1750.054695][T11814] bridge_slave_0: left promiscuous mode [ 1750.086046][T12512] vivid-001: reconnect [ 1750.143902][T11814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.444063][T11814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.814897][T11814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1753.914590][T11814] bond0 (unregistering): Released all slaves [ 1755.183958][T12549] vivid-000: disconnect [ 1755.363016][T12550] kAFS: unable to lookup cell '' [ 1755.619112][T12541] vivid-000: reconnect [ 1755.689666][T11814] hsr_slave_0: left promiscuous mode [ 1755.773420][T12551] vivid-003: disconnect [ 1755.899352][T11814] hsr_slave_1: left promiscuous mode [ 1756.100417][T12543] vivid-003: reconnect [ 1756.185069][T11814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1756.354901][T11814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1756.839476][T12556] kAFS: unable to lookup cell '' [ 1757.215939][T12557] vivid-001: disconnect [ 1757.553357][T12553] vivid-001: reconnect [ 1758.303468][T11814] team0 (unregistering): Port device team_slave_1 removed [ 1758.424650][T11814] team0 (unregistering): Port device team_slave_0 removed [ 1758.604156][T12566] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 1758.631577][T12567] vivid-001: disconnect [ 1758.638289][T12563] vivid-001: reconnect [ 1759.067262][T12570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1131'. [ 1759.239859][T12571] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1131'. [ 1760.517657][T11733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1760.537870][T11733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1760.561995][T11733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1760.594575][T11733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1760.613794][T11733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1761.199264][T12569] bond29: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1761.317401][T12569] bond29: (slave vxcan9): Error -95 calling set_mac_address [ 1761.911388][T12570] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1762.230185][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.272919][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.280751][T12414] bridge_slave_0: entered allmulticast mode [ 1762.347878][T12414] bridge_slave_0: entered promiscuous mode [ 1762.546982][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.570817][T12592] 9p: Bad value for 'rfdno' [ 1762.613205][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.621093][T12414] bridge_slave_1: entered allmulticast mode [ 1762.703082][T11733] Bluetooth: hci3: command tx timeout [ 1762.753308][T12414] bridge_slave_1: entered promiscuous mode [ 1764.000462][T12414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.141569][T12414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1764.949744][T11733] Bluetooth: hci3: command tx timeout [ 1767.012997][T11733] Bluetooth: hci3: command tx timeout [ 1767.457483][T12414] team0: Port device team_slave_0 added [ 1767.567956][T12414] team0: Port device team_slave_1 added [ 1768.362754][T12414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.399019][T12618] vivid-001: disconnect [ 1768.420201][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1768.592596][T12414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1768.698650][T12414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1768.843291][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.083749][T12617] vivid-001: reconnect [ 1769.092547][ T5785] Bluetooth: hci3: command tx timeout [ 1769.108204][T12414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.254201][T10882] bridge_slave_1: left allmulticast mode [ 1770.260531][T10882] bridge_slave_1: left promiscuous mode [ 1770.317970][T10882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.309553][T12637] ===================================================== [ 1771.317499][T12637] BUG: KMSAN: uninit-value in try_module_get+0x122/0x290 [ 1771.325281][T12637] try_module_get+0x122/0x290 [ 1771.330194][T12637] dvb_device_open+0x17a/0x680 [ 1771.335688][T12637] chrdev_open+0x88d/0xb80 [ 1771.340430][T12637] do_dentry_open+0x827/0x1fd0 [ 1771.345652][T12637] vfs_open+0x52/0x5f0 [ 1771.349901][T12637] path_openat+0x5733/0x64c0 [ 1771.354938][T12637] do_file_open+0x2aa/0x680 [ 1771.359947][T12637] do_sys_openat2+0x163/0x380 [ 1771.365290][T12637] __ia32_compat_sys_openat+0x238/0x300 [ 1771.376719][T12637] ia32_sys_call+0x330b/0x4360 [ 1771.381844][T12637] do_int80_emulation+0x15a/0x330 [ 1771.389231][T12637] asm_int80_emulation+0x1f/0x30 [ 1771.394650][T12637] [ 1771.397081][T12637] Uninit was created at: [ 1771.401747][T12637] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 1771.408672][T12637] kmemdup_noprof+0x48/0x100 [ 1771.415420][T12637] neigh_parms_alloc+0x94/0x9e0 [ 1771.420693][T12637] ipv6_add_dev+0x5aa/0x1d50 [ 1771.426027][T12637] addrconf_notify+0x808/0x1cf0 [ 1771.431167][T12637] raw_notifier_call_chain+0x106/0x480 [ 1771.437265][T12637] call_netdevice_notifiers+0x191/0x260 [ 1771.443299][T12637] register_netdevice+0x24c8/0x28a0 [ 1771.448930][T12637] rtnl_newlink_create+0x465/0x1250 [ 1771.454638][T12637] rtnl_newlink+0x2b3c/0x39a0 [ 1771.459561][T12637] rtnetlink_rcv_msg+0x106f/0x14b0 [ 1771.465313][T12637] netlink_rcv_skb+0x54d/0x680 [ 1771.470418][T12637] rtnetlink_rcv+0x35/0x40 [ 1771.481108][T12637] netlink_unicast+0xf04/0x12b0 [ 1771.488516][T12637] netlink_sendmsg+0x10b2/0x1250 [ 1771.493835][T12637] __sys_sendto+0xa08/0xae0 [ 1771.498781][T12637] __ia32_compat_sys_socketcall+0x717/0x1b70 [ 1771.505318][T12637] ia32_sys_call+0x2c57/0x4360 [ 1771.510361][T12637] do_int80_emulation+0x15a/0x330 [ 1771.515823][T12637] asm_int80_emulation+0x1f/0x30 [ 1771.520957][T12637] [ 1771.523633][T12637] CPU: 0 UID: 0 PID: 12637 Comm: syz.2.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.534981][T12637] Tainted: [L]=SOFTLOCKUP [ 1771.539523][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1771.549934][T12637] ===================================================== [ 1771.557261][T12637] Disabling lock debugging due to kernel taint [ 1771.565529][T12637] Kernel panic - not syncing: kmsan.panic set ... [ 1771.572137][T12637] CPU: 0 UID: 0 PID: 12637 Comm: syz.2.1144 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1771.583347][T12637] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1771.589028][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1771.599265][T12637] Call Trace: [ 1771.602676][T12637] [ 1771.605733][T12637] __dump_stack+0x26/0x30 [ 1771.610288][T12637] dump_stack_lvl+0x50/0x1c0 [ 1771.615101][T12637] ? dump_stack+0x12/0x25 [ 1771.619654][T12637] dump_stack+0x1e/0x25 [ 1771.624036][T12637] vpanic+0x7b4/0x1430 [ 1771.628392][T12637] panic+0x15d/0x160 [ 1771.632653][T12637] kmsan_report+0x31a/0x320 [ 1771.637418][T12637] ? __msan_warning+0x1b/0x30 [ 1771.642340][T12637] ? try_module_get+0x122/0x290 [ 1771.647419][T12637] ? dvb_device_open+0x17a/0x680 [ 1771.652594][T12637] ? chrdev_open+0x88d/0xb80 [ 1771.657434][T12637] ? do_dentry_open+0x827/0x1fd0 [ 1771.662568][T12637] ? vfs_open+0x52/0x5f0 [ 1771.667009][T12637] ? path_openat+0x5733/0x64c0 [ 1771.672008][T12637] ? do_file_open+0x2aa/0x680 [ 1771.676918][T12637] ? do_sys_openat2+0x163/0x380 [ 1771.681988][T12637] ? __ia32_compat_sys_openat+0x238/0x300 [ 1771.687999][T12637] ? ia32_sys_call+0x330b/0x4360 [ 1771.693138][T12637] ? do_int80_emulation+0x15a/0x330 [ 1771.698548][T12637] ? asm_int80_emulation+0x1f/0x30 [ 1771.703868][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.709255][T12637] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1771.715838][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.721228][T12637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1771.727306][T12637] ? preempt_schedule_irq+0x79/0xa0 [ 1771.732896][T12637] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 1771.739294][T12637] ? irqentry_exit+0x8f/0x6c0 [ 1771.744198][T12637] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1771.750806][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.756219][T12637] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1771.762804][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.768215][T12637] __msan_warning+0x1b/0x30 [ 1771.773026][T12637] try_module_get+0x122/0x290 [ 1771.778063][T12637] dvb_device_open+0x17a/0x680 [ 1771.783601][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.788991][T12637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1771.795086][T12637] ? __pfx_dvb_device_open+0x10/0x10 [ 1771.800629][T12637] chrdev_open+0x88d/0xb80 [ 1771.805324][T12637] ? __pfx_chrdev_open+0x10/0x10 [ 1771.810522][T12637] do_dentry_open+0x827/0x1fd0 [ 1771.815546][T12637] vfs_open+0x52/0x5f0 [ 1771.819810][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.825231][T12637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1771.831360][T12637] path_openat+0x5733/0x64c0 [ 1771.836209][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.841729][T12637] ? stack_depot_save_flags+0x35/0x790 [ 1771.847636][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.853038][T12637] ? kmsan_get_metadata+0xf1/0x160 [ 1771.858469][T12637] do_file_open+0x2aa/0x680 [ 1771.863286][T12637] do_sys_openat2+0x163/0x380 [ 1771.868248][T12637] __ia32_compat_sys_openat+0x238/0x300 [ 1771.874152][T12637] ia32_sys_call+0x330b/0x4360 [ 1771.879139][T12637] do_int80_emulation+0x15a/0x330 [ 1771.884487][T12637] ? clear_bhb_loop+0x50/0xa0 [ 1771.889473][T12637] ? clear_bhb_loop+0x50/0xa0 [ 1771.894383][T12637] asm_int80_emulation+0x1f/0x30 [ 1771.899546][T12637] RIP: 0023:0xf71a5cab [ 1771.903784][T12637] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1771.923696][T12637] RSP: 002b:00000000f543c03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1771.932387][T12637] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f543c100 [ 1771.940573][T12637] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1771.948700][T12637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1771.956830][T12637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1771.964979][T12637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1771.975174][T12637] [ 1771.979066][T12637] Kernel Offset: disabled [ 1771.983491][T12637] Rebooting in 86400 seconds..