last executing test programs: 11.723480126s ago: executing program 3 (id=2441): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x14) 11.398159743s ago: executing program 3 (id=2444): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, 0x0, 0x0) 11.130257927s ago: executing program 3 (id=2446): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, 0x0, 0x15) 10.870553981s ago: executing program 3 (id=2448): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) 10.627601407s ago: executing program 3 (id=2449): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) 10.171595342s ago: executing program 3 (id=2451): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 7.579965781s ago: executing program 0 (id=2462): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 7.442972625s ago: executing program 0 (id=2464): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 7.255830779s ago: executing program 0 (id=2466): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$sock(r4, &(0x7f0000000040)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x8, @mcast2, 0x100}}}, 0x80, &(0x7f00000016c0)=[{0x0}, {0x0}], 0x2}, 0x4004011) 4.496056209s ago: executing program 0 (id=2476): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) 3.67413345s ago: executing program 0 (id=2480): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 3.580991263s ago: executing program 0 (id=2481): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r4, 0x400, 0x0) 1.741196219s ago: executing program 1 (id=2497): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) 1.675661059s ago: executing program 2 (id=2498): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1.519855279s ago: executing program 2 (id=2499): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, 0x0, 0x15) 1.418850223s ago: executing program 1 (id=2500): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) 1.178188898s ago: executing program 1 (id=2501): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x800) 1.059852465s ago: executing program 2 (id=2502): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 937.205134ms ago: executing program 1 (id=2503): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) 614.544311ms ago: executing program 1 (id=2504): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r5, 0x8000}], 0x1, &(0x7f0000000100)={r6, r7+10000000}, 0x0, 0x0) 568.037294ms ago: executing program 2 (id=2505): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r6, 0x0, 0x0) 253.459426ms ago: executing program 1 (id=2506): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x2, 0x1, 0x323}, 0x0, 0x0) 227.939551ms ago: executing program 2 (id=2507): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000200), 0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2508): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 83.005935][ T5811] cgroup: Unknown subsys name 'net' [ 83.196599][ T5811] cgroup: Unknown subsys name 'cpuset' [ 83.205895][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.877874][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.612881][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.632963][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.641836][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.651966][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.653469][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.667006][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.670763][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.675923][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.683961][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.689434][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.703533][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.703778][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.718433][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.720268][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.726748][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.733859][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.747032][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.754500][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.763553][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.776099][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.362547][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 89.402773][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 89.510953][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.553021][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 89.648305][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.655904][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.663660][ T5822] bridge_slave_0: entered allmulticast mode [ 89.671385][ T5822] bridge_slave_0: entered promiscuous mode [ 89.689100][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.696632][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.704042][ T5824] bridge_slave_0: entered allmulticast mode [ 89.711356][ T5824] bridge_slave_0: entered promiscuous mode [ 89.725925][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.733227][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.740381][ T5822] bridge_slave_1: entered allmulticast mode [ 89.747886][ T5822] bridge_slave_1: entered promiscuous mode [ 89.769379][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.776668][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.783992][ T5824] bridge_slave_1: entered allmulticast mode [ 89.791485][ T5824] bridge_slave_1: entered promiscuous mode [ 89.891296][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.919634][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.940503][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.950349][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.959263][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.966663][ T5825] bridge_slave_0: entered allmulticast mode [ 89.974105][ T5825] bridge_slave_0: entered promiscuous mode [ 89.984503][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.020930][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.028389][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.035820][ T5825] bridge_slave_1: entered allmulticast mode [ 90.043672][ T5825] bridge_slave_1: entered promiscuous mode [ 90.124921][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.132252][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.139530][ T5823] bridge_slave_0: entered allmulticast mode [ 90.147353][ T5823] bridge_slave_0: entered promiscuous mode [ 90.157265][ T5824] team0: Port device team_slave_0 added [ 90.178807][ T5822] team0: Port device team_slave_0 added [ 90.185141][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.192615][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.199803][ T5823] bridge_slave_1: entered allmulticast mode [ 90.207510][ T5823] bridge_slave_1: entered promiscuous mode [ 90.216524][ T5824] team0: Port device team_slave_1 added [ 90.238542][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.250255][ T5822] team0: Port device team_slave_1 added [ 90.289792][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.328412][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.364668][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.371651][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.397651][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.412672][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.435276][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.442488][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.468898][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.480892][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.488398][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.514747][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.541223][ T5825] team0: Port device team_slave_0 added [ 90.548096][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.557085][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.583374][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.617041][ T5825] team0: Port device team_slave_1 added [ 90.649196][ T5823] team0: Port device team_slave_0 added [ 90.699009][ T5823] team0: Port device team_slave_1 added [ 90.705683][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.713539][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.739679][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.768568][ T5822] hsr_slave_0: entered promiscuous mode [ 90.775377][ T5822] hsr_slave_1: entered promiscuous mode [ 90.783037][ T52] Bluetooth: hci2: command tx timeout [ 90.783073][ T5145] Bluetooth: hci0: command tx timeout [ 90.804585][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.811558][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.837835][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.862804][ T5145] Bluetooth: hci1: command tx timeout [ 90.862819][ T52] Bluetooth: hci3: command tx timeout [ 90.900644][ T5824] hsr_slave_0: entered promiscuous mode [ 90.907270][ T5824] hsr_slave_1: entered promiscuous mode [ 90.914190][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 90.920088][ T5824] Cannot create hsr debugfs directory [ 90.941305][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.948521][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.974896][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.008634][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.015708][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.041762][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.122276][ T5825] hsr_slave_0: entered promiscuous mode [ 91.129077][ T5825] hsr_slave_1: entered promiscuous mode [ 91.135758][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 91.141519][ T5825] Cannot create hsr debugfs directory [ 91.275490][ T5823] hsr_slave_0: entered promiscuous mode [ 91.281956][ T5823] hsr_slave_1: entered promiscuous mode [ 91.288425][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 91.294261][ T5823] Cannot create hsr debugfs directory [ 91.648160][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.661207][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.681490][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.693080][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.752560][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.779114][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.789840][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.800836][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.869483][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.885354][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.905470][ T43] cfg80211: failed to load regulatory.db [ 91.918227][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.949580][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.031333][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.050851][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.069623][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.082054][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.115792][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.179429][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.234405][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.241709][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.255492][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.262708][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.316205][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.341619][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.376870][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.407003][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.414173][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.435203][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.446650][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.453813][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.483346][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.490488][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.514513][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.521665][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.540577][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.570972][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.664946][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.766953][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.774193][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.820990][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.828200][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.864013][ T5145] Bluetooth: hci0: command tx timeout [ 92.868371][ T52] Bluetooth: hci2: command tx timeout [ 92.905190][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.942928][ T52] Bluetooth: hci3: command tx timeout [ 92.943597][ T5145] Bluetooth: hci1: command tx timeout [ 93.108077][ T5822] veth0_vlan: entered promiscuous mode [ 93.147446][ T5822] veth1_vlan: entered promiscuous mode [ 93.237574][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.285641][ T5822] veth0_macvtap: entered promiscuous mode [ 93.318801][ T5822] veth1_macvtap: entered promiscuous mode [ 93.364331][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.402102][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.416834][ T5824] veth0_vlan: entered promiscuous mode [ 93.439593][ T5824] veth1_vlan: entered promiscuous mode [ 93.449932][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.480636][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.524405][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.534602][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.564156][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.573109][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.607073][ T5825] veth0_vlan: entered promiscuous mode [ 93.647714][ T5824] veth0_macvtap: entered promiscuous mode [ 93.654818][ T5823] veth0_vlan: entered promiscuous mode [ 93.665587][ T5824] veth1_macvtap: entered promiscuous mode [ 93.681499][ T5825] veth1_vlan: entered promiscuous mode [ 93.725102][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.736109][ T5823] veth1_vlan: entered promiscuous mode [ 93.748172][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.805370][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.815514][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.827595][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.843668][ T5825] veth0_macvtap: entered promiscuous mode [ 93.855897][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.883423][ T5825] veth1_macvtap: entered promiscuous mode [ 93.897514][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.907834][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.934710][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.945091][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.970934][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.991652][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.000410][ T5823] veth0_macvtap: entered promiscuous mode [ 94.012918][ T5823] veth1_macvtap: entered promiscuous mode [ 94.038514][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.086647][ T1008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.126872][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.168845][ T1008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.177817][ T1008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.197093][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.226080][ T1008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.283126][ T3017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.291912][ T3017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.311132][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.321506][ T3017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.333536][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.343762][ T3017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.436843][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.445619][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.527621][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.556028][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.634895][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.663406][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.785328][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.805577][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.811663][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.829365][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.944292][ T5145] Bluetooth: hci0: command tx timeout [ 94.944514][ T52] Bluetooth: hci2: command tx timeout [ 95.023441][ T52] Bluetooth: hci1: command tx timeout [ 95.028914][ T52] Bluetooth: hci3: command tx timeout [ 95.679974][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.896826][ T5958] netlink: 56 bytes leftover after parsing attributes in process `syz.3.21'. [ 96.267770][ T5970] netlink: 268 bytes leftover after parsing attributes in process `syz.0.27'. [ 96.547628][ T5984] netlink: 56 bytes leftover after parsing attributes in process `syz.2.34'. [ 96.650297][ T5987] netlink: 56 bytes leftover after parsing attributes in process `syz.0.35'. [ 96.928227][ T5999] netlink: 268 bytes leftover after parsing attributes in process `syz.2.41'. [ 97.024649][ T5145] Bluetooth: hci0: command tx timeout [ 97.025592][ T52] Bluetooth: hci2: command tx timeout [ 97.104533][ T52] Bluetooth: hci3: command tx timeout [ 97.104546][ T5145] Bluetooth: hci1: command tx timeout [ 97.190668][ T6009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.46'. [ 97.271927][ T6011] netlink: 56 bytes leftover after parsing attributes in process `syz.1.47'. [ 98.238606][ T6053] netlink: 268 bytes leftover after parsing attributes in process `syz.3.67'. [ 98.953119][ T6081] netlink: 268 bytes leftover after parsing attributes in process `syz.3.80'. [ 99.209000][ T6090] 9p: Bad value for 'rfdno' [ 99.421653][ T6100] tipc: Enabling of bearer rejected, failed to enable media [ 99.853914][ T6117] 9p: Bad value for 'rfdno' [ 100.483649][ T6144] 9p: Bad value for 'rfdno' [ 100.688726][ T6152] netlink: 268 bytes leftover after parsing attributes in process `syz.3.115'. [ 100.855758][ T6162] ======================================================= [ 100.855758][ T6162] WARNING: The mand mount option has been deprecated and [ 100.855758][ T6162] and is ignored by this kernel. Remove the mand [ 100.855758][ T6162] option from the mount to silence this warning. [ 100.855758][ T6162] ======================================================= [ 104.697193][ T6297] netlink: 56 bytes leftover after parsing attributes in process `syz.0.187'. [ 105.426121][ T6319] netlink: 56 bytes leftover after parsing attributes in process `syz.3.197'. [ 106.014866][ T6348] netlink: 'syz.2.211': attribute type 6 has an invalid length. [ 106.094554][ T6346] netlink: 56 bytes leftover after parsing attributes in process `syz.0.210'. [ 106.105472][ T6349] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 106.123495][ T6349] netlink: 17 bytes leftover after parsing attributes in process `syz.2.211'. [ 106.838833][ T6376] netlink: 56 bytes leftover after parsing attributes in process `syz.3.224'. [ 107.332659][ T6393] netlink: 104 bytes leftover after parsing attributes in process `syz.1.232'. [ 110.624573][ T6465] netlink: 56 bytes leftover after parsing attributes in process `syz.2.266'. [ 112.745775][ T6500] netlink: 268 bytes leftover after parsing attributes in process `syz.3.283'. [ 113.196644][ T6508] netlink: 'syz.2.286': attribute type 4 has an invalid length. [ 114.797402][ T6539] netlink: 268 bytes leftover after parsing attributes in process `syz.1.293'. [ 115.368438][ T6553] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'. [ 115.598045][ T6559] netlink: 268 bytes leftover after parsing attributes in process `syz.2.311'. [ 116.556205][ T6581] netlink: 56 bytes leftover after parsing attributes in process `syz.0.319'. [ 119.265427][ T6615] netlink: 56 bytes leftover after parsing attributes in process `syz.1.328'. [ 120.989540][ T6664] netlink: 268 bytes leftover after parsing attributes in process `syz.0.355'. [ 121.733798][ T6670] netlink: 56 bytes leftover after parsing attributes in process `syz.3.358'. [ 124.013023][ T6702] netlink: 56 bytes leftover after parsing attributes in process `syz.1.374'. [ 124.040109][ T6706] netlink: 268 bytes leftover after parsing attributes in process `syz.0.373'. [ 125.280259][ T6731] netlink: 56 bytes leftover after parsing attributes in process `syz.1.384'. [ 126.907584][ T6753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.396'. [ 128.232855][ T6769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.406'. [ 130.179964][ T6803] netlink: 56 bytes leftover after parsing attributes in process `syz.3.419'. [ 132.739467][ T6837] netlink: 56 bytes leftover after parsing attributes in process `syz.0.436'. [ 133.716418][ T6860] netlink: 56 bytes leftover after parsing attributes in process `syz.3.447'. [ 135.009891][ T6885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.457'. [ 135.798374][ T6907] netlink: 268 bytes leftover after parsing attributes in process `syz.3.469'. [ 136.544026][ T6927] netlink: 268 bytes leftover after parsing attributes in process `syz.3.478'. [ 138.000008][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.007033][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.686023][ T7154] netlink: 268 bytes leftover after parsing attributes in process `syz.1.587'. [ 154.499968][ T7174] netlink: 268 bytes leftover after parsing attributes in process `syz.1.596'. [ 159.190364][ T7268] netlink: 268 bytes leftover after parsing attributes in process `syz.2.645'. [ 160.016592][ T7281] netlink: 56 bytes leftover after parsing attributes in process `syz.1.652'. [ 161.554300][ T7307] netlink: 56 bytes leftover after parsing attributes in process `syz.3.663'. [ 167.206856][ T7349] netlink: 268 bytes leftover after parsing attributes in process `syz.2.686'. [ 168.124453][ T7370] netlink: 268 bytes leftover after parsing attributes in process `syz.2.695'. [ 168.976259][ T7391] netlink: 268 bytes leftover after parsing attributes in process `syz.1.704'. [ 175.163234][ T7469] netlink: 56 bytes leftover after parsing attributes in process `syz.0.741'. [ 175.616220][ T7475] mmap: syz.0.746 (7475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.966914][ T7479] netlink: 268 bytes leftover after parsing attributes in process `syz.0.748'. [ 176.480311][ T7489] netlink: 56 bytes leftover after parsing attributes in process `syz.0.751'. [ 176.966065][ T7504] netlink: 268 bytes leftover after parsing attributes in process `syz.2.757'. [ 177.151986][ T7510] netlink: 56 bytes leftover after parsing attributes in process `syz.2.760'. [ 177.702769][ T7526] netlink: 268 bytes leftover after parsing attributes in process `syz.0.768'. [ 178.384925][ T7551] netlink: 268 bytes leftover after parsing attributes in process `syz.0.781'. [ 178.796581][ T7566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.786'. [ 179.088554][ T7574] netlink: 268 bytes leftover after parsing attributes in process `syz.3.791'. [ 179.812353][ T7595] netlink: 268 bytes leftover after parsing attributes in process `syz.1.801'. [ 185.372410][ T7703] netlink: 56 bytes leftover after parsing attributes in process `syz.1.849'. [ 187.362966][ T7735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.864'. [ 192.615113][ T7827] netlink: 268 bytes leftover after parsing attributes in process `syz.0.911'. [ 193.376473][ T7843] netlink: 268 bytes leftover after parsing attributes in process `syz.0.920'. [ 196.827232][ T7863] netlink: 268 bytes leftover after parsing attributes in process `syz.3.930'. [ 199.429707][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.436396][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.738160][ T7921] netlink: 56 bytes leftover after parsing attributes in process `syz.3.956'. [ 201.325760][ T7937] netlink: 268 bytes leftover after parsing attributes in process `syz.0.965'. [ 201.909281][ T7945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.969'. [ 202.499676][ T7955] netlink: 268 bytes leftover after parsing attributes in process `syz.0.974'. [ 206.897699][ T7995] netlink: 268 bytes leftover after parsing attributes in process `syz.1.993'. [ 207.745363][ T8013] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1003'. [ 209.020365][ T8039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1013'. [ 209.814860][ T8057] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1023'. [ 210.681896][ T8071] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1031'. [ 211.072324][ T8078] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1034'. [ 211.555783][ T8089] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1040'. [ 211.745286][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 211.751451][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 211.758343][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 211.758731][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 212.888188][ T8124] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1057'. [ 213.571666][ T8142] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1056'. [ 221.403012][ T8276] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1132'. [ 224.890706][ T8300] netlink: 'syz.2.1143': attribute type 16 has an invalid length. [ 224.922284][ T8300] netlink: 64122 bytes leftover after parsing attributes in process `syz.2.1143'. [ 229.761506][ T8358] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1174'. [ 231.156450][ T8380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1183'. [ 233.109178][ T8394] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1192'. [ 234.633733][ T8415] 9p: Bad value for 'wfdno' [ 237.807367][ T8474] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1230'. [ 238.574445][ T8497] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1240'. [ 238.882270][ T8503] 9p: Bad value for 'wfdno' [ 239.104188][ T8507] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1245'. [ 239.598713][ T8521] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1251'. [ 239.757610][ T8525] 9p: Bad value for 'wfdno' [ 239.939950][ T8529] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1256'. [ 240.437561][ T8543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1263'. [ 240.775766][ T8551] 9p: Bad value for 'wfdno' [ 241.426628][ T8565] netlink: 'syz.3.1275': attribute type 4 has an invalid length. [ 241.920150][ T8579] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1282'. [ 242.706963][ T8605] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1293'. [ 242.824118][ T8609] netlink: 'syz.3.1294': attribute type 4 has an invalid length. [ 243.556085][ T8631] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1305'. [ 243.843771][ T8643] 9p: Bad value for 'rfdno' [ 245.139656][ T8675] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1328'. [ 247.136271][ T8715] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1349'. [ 248.710462][ T8752] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 248.734975][ T8752] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 249.184491][ T8765] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1372'. [ 249.796791][ T8781] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1367'. [ 250.461932][ T8807] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1390'. [ 250.662049][ T8813] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 250.683188][ T8813] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 251.097006][ T8829] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1401'. [ 253.436363][ T8883] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1428'. [ 253.738387][ T8891] netlink: 'syz.3.1432': attribute type 4 has an invalid length. [ 253.774268][ T8891] netlink: 'syz.3.1432': attribute type 4 has an invalid length. [ 254.913191][ T8926] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1449'. [ 260.870166][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.876649][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.904043][ T9112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 269.404237][ T9162] netlink: 'syz.2.1562': attribute type 4 has an invalid length. [ 269.457391][ T9162] netlink: 'syz.2.1562': attribute type 4 has an invalid length. [ 271.052742][ T9190] netlink: 'syz.3.1577': attribute type 4 has an invalid length. [ 271.066310][ T9190] netlink: 'syz.3.1577': attribute type 4 has an invalid length. [ 275.713187][ T9250] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1607'. [ 277.591462][ T9300] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1630'. [ 283.578122][ T9366] tmpfs: Unknown parameter 'nr_block' [ 285.575971][ T9402] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1681'. [ 286.238474][ T9410] tmpfs: Unknown parameter 'nr_block' [ 291.211335][ T9509] tmpfs: Bad value for 'nr_blocks' [ 292.800567][ T9536] Zero length message leads to an empty skb [ 298.630898][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 301.463964][ T9700] overlayfs: missing 'lowerdir' [ 302.216091][ T9710] 9p: Bad value for 'rfdno' [ 302.726223][ T9716] netlink: 'syz.3.1830': attribute type 4 has an invalid length. [ 302.753899][ T9716] netlink: 'syz.3.1830': attribute type 4 has an invalid length. [ 303.896441][ T9732] netlink: 'syz.3.1844': attribute type 4 has an invalid length. [ 303.926289][ T9732] netlink: 'syz.3.1844': attribute type 4 has an invalid length. [ 310.384080][ T9813] 9p: Unknown access argument a: -22 [ 310.951203][ T9825] netlink: 'syz.1.1888': attribute type 4 has an invalid length. [ 310.969301][ T9825] netlink: 'syz.1.1888': attribute type 4 has an invalid length. [ 311.421958][ T9836] 9p: Unknown access argument a: -22 [ 313.137505][ T9868] netlink: 'syz.2.1908': attribute type 4 has an invalid length. [ 313.167133][ T9868] netlink: 'syz.2.1908': attribute type 4 has an invalid length. [ 315.777571][ T9955] overlayfs: missing 'lowerdir' [ 316.869173][ T9981] overlayfs: missing 'lowerdir' [ 317.943070][T10005] netlink: 'syz.0.1976': attribute type 16 has an invalid length. [ 317.961236][T10005] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.1976'. [ 320.936505][T10083] overlayfs: missing 'lowerdir' [ 321.583040][T10105] 9p: Unknown access argument a: -22 [ 322.312303][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.318671][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.377134][T10154] 9p: Unknown access argument a: -22 [ 325.157101][T10165] 9p: Bad value for 'wfdno' [ 325.869418][T10183] netlink: 'syz.3.2056': attribute type 4 has an invalid length. [ 325.888017][T10183] netlink: 'syz.3.2056': attribute type 4 has an invalid length. [ 325.913708][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 326.126175][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.146285][ T5917] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 326.164788][ T5917] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 326.181795][ T5917] usb 1-1: Manufacturer: syz [ 326.210833][ T5917] usb 1-1: config 0 descriptor?? [ 326.227155][ T5917] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 326.434518][ T5914] usb 1-1: USB disconnect, device number 2 [ 327.492883][T10250] 9p: Unknown access argument a: -22 [ 327.694287][T10262] netlink: 'syz.1.2092': attribute type 4 has an invalid length. [ 327.746162][T10265] netlink: 'syz.1.2092': attribute type 4 has an invalid length. [ 328.416110][T10296] netlink: 'syz.2.2109': attribute type 4 has an invalid length. [ 328.454796][T10296] netlink: 'syz.2.2109': attribute type 4 has an invalid length. [ 333.345953][T10387] fuse: Bad value for 'fd' [ 333.569229][T10393] 9pnet_fd: Insufficient options for proto=fd [ 334.850020][T10434] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 334.864024][T10434] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 334.954083][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 335.125720][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.147344][ T5917] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 335.172135][ T5917] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 335.190430][ T5917] usb 3-1: Manufacturer: syz [ 335.211336][ T5917] usb 3-1: config 0 descriptor?? [ 335.235169][ T5917] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 335.444912][ T5917] usb 3-1: USB disconnect, device number 2 [ 336.715459][T10458] overlayfs: missing 'lowerdir' [ 338.072188][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 338.244375][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.271984][ T5875] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 338.304135][ T5875] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 338.332166][ T5875] usb 3-1: Manufacturer: syz [ 338.363162][ T5875] usb 3-1: config 0 descriptor?? [ 338.383606][ T5875] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 338.481911][T10484] netlink: 'syz.1.2201': attribute type 4 has an invalid length. [ 338.509108][T10484] netlink: 'syz.1.2201': attribute type 4 has an invalid length. [ 338.583744][ T5875] usb 3-1: USB disconnect, device number 3 [ 338.962009][T10490] overlayfs: missing 'lowerdir' [ 339.131014][T10492] 9pnet_fd: Insufficient options for proto=fd [ 339.883983][T10504] 9p: Unknown access argument a: -22 [ 340.712855][T10525] overlayfs: missing 'lowerdir' [ 342.140205][T10548] overlayfs: missing 'lowerdir' [ 344.658009][T10566] 9p: Bad value for 'rfdno' [ 344.831984][T10570] overlayfs: missing 'lowerdir' [ 345.127211][T10578] netlink: 'syz.1.2249': attribute type 4 has an invalid length. [ 345.142618][T10578] netlink: 'syz.1.2249': attribute type 4 has an invalid length. [ 345.873974][T10604] netlink: 'syz.1.2260': attribute type 4 has an invalid length. [ 345.912471][T10604] netlink: 'syz.1.2260': attribute type 4 has an invalid length. [ 347.021804][T10629] netlink: 'syz.2.2272': attribute type 4 has an invalid length. [ 347.057925][T10629] netlink: 'syz.2.2272': attribute type 4 has an invalid length. [ 347.409384][T10633] 9p: Unknown access argument a: -22 [ 349.531358][T10662] 9p: Unknown access argument a: -22 [ 350.212254][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 350.397330][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.429134][ T5917] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 350.452633][ T5917] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 350.481876][ T5917] usb 1-1: Manufacturer: syz [ 350.503392][ T5917] usb 1-1: config 0 descriptor?? [ 350.524835][ T5917] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 350.719616][ T5882] usb 1-1: USB disconnect, device number 3 [ 351.388345][T10688] netlink: 'syz.0.2301': attribute type 4 has an invalid length. [ 351.418551][T10688] netlink: 'syz.0.2301': attribute type 4 has an invalid length. [ 352.134207][T10711] netlink: 'syz.0.2313': attribute type 4 has an invalid length. [ 352.166008][T10711] netlink: 'syz.0.2313': attribute type 4 has an invalid length. [ 354.543006][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.552642][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.560614][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.568888][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.577166][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.181139][T10756] chnl_net:caif_netlink_parms(): no params data found [ 355.576360][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.584481][T10756] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.591772][T10756] bridge_slave_0: entered allmulticast mode [ 355.614868][T10756] bridge_slave_0: entered promiscuous mode [ 355.636899][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.652635][T10756] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.670129][T10756] bridge_slave_1: entered allmulticast mode [ 355.692871][T10756] bridge_slave_1: entered promiscuous mode [ 355.848940][T10756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.879583][T10756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.057956][T10756] team0: Port device team_slave_0 added [ 356.107827][T10756] team0: Port device team_slave_1 added [ 356.206040][T10765] netlink: 'syz.1.2336': attribute type 4 has an invalid length. [ 356.259039][T10756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.259370][T10766] netlink: 'syz.1.2336': attribute type 4 has an invalid length. [ 356.272154][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.341838][T10756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.457982][ T1008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.496844][T10756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.514923][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.589817][T10756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.622715][ T5838] Bluetooth: hci4: command tx timeout [ 356.668536][ T1008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.855605][ T1008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.894972][T10756] hsr_slave_0: entered promiscuous mode [ 356.916071][T10756] hsr_slave_1: entered promiscuous mode [ 356.926916][T10756] debugfs: 'hsr0' already exists in 'hsr' [ 356.952320][T10756] Cannot create hsr debugfs directory [ 357.016828][ T1008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.857666][T10802] netlink: 'syz.2.2353': attribute type 4 has an invalid length. [ 357.896333][ T1008] bridge_slave_1: left allmulticast mode [ 357.909786][T10803] netlink: 'syz.2.2353': attribute type 4 has an invalid length. [ 357.920455][ T1008] bridge_slave_1: left promiscuous mode [ 357.937807][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.958804][ T1008] bridge_slave_0: left allmulticast mode [ 357.965833][ T1008] bridge_slave_0: left promiscuous mode [ 357.981947][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.595974][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.623443][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.644218][ T1008] bond0 (unregistering): Released all slaves [ 358.705739][ T5838] Bluetooth: hci4: command tx timeout [ 359.446394][ T1008] hsr_slave_0: left promiscuous mode [ 359.466435][ T1008] hsr_slave_1: left promiscuous mode [ 359.493107][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.512316][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.531226][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.542145][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.598694][ T1008] veth1_macvtap: left promiscuous mode [ 359.615169][ T1008] veth0_macvtap: left promiscuous mode [ 359.620931][ T1008] veth1_vlan: left promiscuous mode [ 359.642391][ T1008] veth0_vlan: left promiscuous mode [ 360.783907][ T5838] Bluetooth: hci4: command tx timeout [ 360.865015][T10834] netlink: 'syz.3.2362': attribute type 4 has an invalid length. [ 360.916570][T10835] netlink: 'syz.3.2362': attribute type 4 has an invalid length. [ 360.941412][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 361.032792][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 361.845445][T10756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.920888][T10756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.933383][T10841] 9p: Unknown access argument a: -22 [ 361.968309][T10756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.017402][T10756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.357473][T10756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.453276][T10756] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.485640][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.492968][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.533392][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.540682][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.653380][T10756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.871867][ T5838] Bluetooth: hci4: command tx timeout [ 363.229169][T10756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.406712][T10756] veth0_vlan: entered promiscuous mode [ 363.431326][T10756] veth1_vlan: entered promiscuous mode [ 363.514417][T10756] veth0_macvtap: entered promiscuous mode [ 363.527168][T10756] veth1_macvtap: entered promiscuous mode [ 363.542330][ T976] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 363.576924][T10756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.613215][T10756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.642730][T10807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.666299][T10807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.683367][T10807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.705716][T10807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.724381][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.740141][ T976] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 363.755505][ T976] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 363.788296][ T976] usb 3-1: Manufacturer: syz [ 363.806432][ T976] usb 3-1: config 0 descriptor?? [ 363.828784][ T976] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 363.876615][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.895844][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.941395][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.950632][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.017718][ T976] usb 3-1: USB disconnect, device number 4 [ 364.356832][T10880] netlink: 'syz.0.2372': attribute type 4 has an invalid length. [ 364.405423][T10880] netlink: 'syz.0.2372': attribute type 4 has an invalid length. [ 365.111863][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.121991][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.134123][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.144127][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.151859][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.721513][T10807] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.997064][T10807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.200282][T10807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.474903][T10807] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.550255][T10898] chnl_net:caif_netlink_parms(): no params data found [ 366.562216][ T976] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 366.739592][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.789069][ T976] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 366.827409][ T976] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 366.848747][ T976] usb 3-1: Manufacturer: syz [ 366.865694][ T976] usb 3-1: config 0 descriptor?? [ 366.886650][ T976] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 367.023431][T10807] bridge_slave_1: left allmulticast mode [ 367.029542][T10807] bridge_slave_1: left promiscuous mode [ 367.039814][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.063221][T10807] bridge_slave_0: left allmulticast mode [ 367.069166][T10807] bridge_slave_0: left promiscuous mode [ 367.083887][ T5875] usb 3-1: USB disconnect, device number 5 [ 367.086643][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.192274][ T5827] Bluetooth: hci0: command tx timeout [ 367.772998][T10807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.833614][T10807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.848122][T10807] bond0 (unregistering): Released all slaves [ 367.916806][T10898] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.944851][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.957951][T10898] bridge_slave_0: entered allmulticast mode [ 367.980161][T10898] bridge_slave_0: entered promiscuous mode [ 368.056670][T10898] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.075600][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.093299][T10898] bridge_slave_1: entered allmulticast mode [ 368.140807][T10898] bridge_slave_1: entered promiscuous mode [ 368.396671][T10898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.437073][T10898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.796298][T10898] team0: Port device team_slave_0 added [ 368.825725][T10898] team0: Port device team_slave_1 added [ 369.098967][T10898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.132114][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.184770][T10898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.263271][ T5827] Bluetooth: hci0: command tx timeout [ 369.289155][T10807] hsr_slave_0: left promiscuous mode [ 369.300579][T10807] hsr_slave_1: left promiscuous mode [ 369.332785][T10807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.340352][T10807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.413309][T10807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.444248][T10807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.524229][T10807] veth1_macvtap: left promiscuous mode [ 369.529971][T10807] veth0_macvtap: left promiscuous mode [ 369.576354][T10807] veth1_vlan: left promiscuous mode [ 369.581777][T10807] veth0_vlan: left promiscuous mode [ 370.851674][T10807] team0 (unregistering): Port device team_slave_1 removed [ 370.932806][T10807] team0 (unregistering): Port device team_slave_0 removed [ 371.346171][ T5827] Bluetooth: hci0: command tx timeout [ 372.003092][T10898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.042906][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.104127][T10898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.303953][T10898] hsr_slave_0: entered promiscuous mode [ 372.310945][T10898] hsr_slave_1: entered promiscuous mode [ 373.432245][ T5827] Bluetooth: hci0: command tx timeout [ 373.666374][T10898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.717371][T10898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.748382][T10898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.768881][T10898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.026615][T10898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.069917][T10898] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.111179][T10807] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.118445][T10807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.158491][T10807] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.165850][T10807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.262141][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 374.446176][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.468644][ T5882] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 374.493032][ T5882] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 374.521819][ T5882] usb 4-1: Manufacturer: syz [ 374.534969][ T5882] usb 4-1: config 0 descriptor?? [ 374.555302][ T5882] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 374.754097][ T5882] usb 4-1: USB disconnect, device number 2 [ 374.773222][T10898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.844448][T10898] veth0_vlan: entered promiscuous mode [ 374.859945][T10898] veth1_vlan: entered promiscuous mode [ 374.963477][T10898] veth0_macvtap: entered promiscuous mode [ 374.990150][T10898] veth1_macvtap: entered promiscuous mode [ 375.050008][T10898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.088048][T10898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.127853][T10807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.171099][T10807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.207936][T10807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.223094][T10807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.464481][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.508090][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.620963][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.662353][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.163246][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.181815][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.189925][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.200184][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.211143][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.233459][T11136] netlink: 'syz.0.2457': attribute type 4 has an invalid length. [ 378.294542][T11136] netlink: 'syz.0.2457': attribute type 4 has an invalid length. [ 378.832401][ T976] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 378.904915][T10807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.950687][T11133] chnl_net:caif_netlink_parms(): no params data found [ 379.009305][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.031362][ T976] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 379.042671][ T976] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 379.050724][ T976] usb 1-1: Manufacturer: syz [ 379.064574][T10807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.077356][ T976] usb 1-1: config 0 descriptor?? [ 379.107088][ T976] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 379.194267][T10807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.292461][ T5914] usb 1-1: USB disconnect, device number 4 [ 379.326997][T10807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.457271][T11133] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.472823][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.480105][T11133] bridge_slave_0: entered allmulticast mode [ 379.505701][T11133] bridge_slave_0: entered promiscuous mode [ 379.524847][T11133] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.532323][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.552368][T11133] bridge_slave_1: entered allmulticast mode [ 379.560380][T11133] bridge_slave_1: entered promiscuous mode [ 379.640881][T11133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.679834][T11133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.846986][T11133] team0: Port device team_slave_0 added [ 379.947785][T11133] team0: Port device team_slave_1 added [ 380.126619][T11133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.142276][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.181669][T11133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.208746][T10807] bridge_slave_1: left allmulticast mode [ 380.216796][T10807] bridge_slave_1: left promiscuous mode [ 380.224085][ T5838] Bluetooth: hci3: command tx timeout [ 380.232527][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.314868][T10807] bridge_slave_0: left allmulticast mode [ 380.320565][T10807] bridge_slave_0: left promiscuous mode [ 380.326462][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.259006][T10807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.300166][T10807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.322595][T10807] bond0 (unregistering): Released all slaves [ 381.373075][T11133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.401335][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.478265][T11133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.131138][T11133] hsr_slave_0: entered promiscuous mode [ 382.163583][T11133] hsr_slave_1: entered promiscuous mode [ 382.170176][T11133] debugfs: 'hsr0' already exists in 'hsr' [ 382.202247][T11133] Cannot create hsr debugfs directory [ 382.302721][ T5838] Bluetooth: hci3: command tx timeout [ 382.312440][T10807] hsr_slave_0: left promiscuous mode [ 382.366179][T10807] hsr_slave_1: left promiscuous mode [ 382.372749][T10807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.380196][T10807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.405812][T10807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.413679][T10807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.461324][T10807] veth1_macvtap: left promiscuous mode [ 382.470247][T10807] veth0_macvtap: left promiscuous mode [ 382.482369][T10807] veth1_vlan: left promiscuous mode [ 382.494468][T10807] veth0_vlan: left promiscuous mode [ 383.754883][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.761336][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.333688][T10807] team0 (unregistering): Port device team_slave_1 removed [ 384.383443][ T5838] Bluetooth: hci3: command tx timeout [ 384.487569][T10807] team0 (unregistering): Port device team_slave_0 removed [ 386.462690][ T5838] Bluetooth: hci3: command tx timeout [ 387.582854][T11211] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 387.589102][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.0.2481 Not tainted syzkaller #0 PREEMPT(full) [ 387.598488][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.608639][T11211] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 387.613957][T11211] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 387.633660][T11211] RSP: 0018:ffffc90003d6fd08 EFLAGS: 00010207 [ 387.639757][T11211] RAX: 1ffff11003bd72ef RBX: ffff88801deb9750 RCX: 0000000000080000 [ 387.647739][T11211] RDX: ffffc90019721000 RSI: 000000000007ffff RDI: 0000000000080000 [ 387.655726][T11211] RBP: 000000000000002e R08: ffff888033cd1c1f R09: 1ffff1100679a383 [ 387.663704][T11211] R10: dffffc0000000000 R11: ffffed100679a384 R12: 00000000000000c6 [ 387.671680][T11211] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 387.679659][T11211] FS: 00007f70960006c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 387.688696][T11211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.695281][T11211] CR2: 000000110c244864 CR3: 0000000078500000 CR4: 00000000003526f0 [ 387.703262][T11211] Call Trace: [ 387.706558][T11211] [ 387.709497][T11211] create_new_namespaces+0x47a/0x540 [ 387.714802][T11211] unshare_nsproxy_namespaces+0x11c/0x170 [ 387.720567][T11211] ksys_unshare+0x4c8/0x8c0 [ 387.725102][T11211] ? __pfx_ksys_unshare+0x10/0x10 [ 387.730156][T11211] __x64_sys_unshare+0x38/0x50 [ 387.734939][T11211] do_syscall_64+0xfa/0xfa0 [ 387.739460][T11211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.745544][T11211] ? clear_bhb_loop+0x60/0xb0 [ 387.750322][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.756227][T11211] RIP: 0033:0x7f709518f6c9 [ 387.760664][T11211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.780273][T11211] RSP: 002b:00007f7096000038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 387.788704][T11211] RAX: ffffffffffffffda RBX: 00007f70953e5fa0 RCX: 00007f709518f6c9 [ 387.796693][T11211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 387.804671][T11211] RBP: 00007f7095211f91 R08: 0000000000000000 R09: 0000000000000000 [ 387.812651][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.820714][T11211] R13: 00007f70953e6038 R14: 00007f70953e5fa0 R15: 00007ffdbba020c8 [ 387.828697][T11211] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 387.831728][T11211] Modules linked in: [ 387.836419][T11211] ---[ end trace 0000000000000000 ]--- [ 387.922169][T11211] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 387.927532][T11211] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 387.963832][T11211] RSP: 0018:ffffc90003d6fd08 EFLAGS: 00010207 [ 387.970012][T11211] RAX: 1ffff11003bd72ef RBX: ffff88801deb9750 RCX: 0000000000080000 [ 387.992092][T11211] RDX: ffffc90019721000 RSI: 000000000007ffff RDI: 0000000000080000 [ 388.000119][T11211] RBP: 000000000000002e R08: ffff888033cd1c1f R09: 1ffff1100679a383 [ 388.042094][T11211] R10: dffffc0000000000 R11: ffffed100679a384 R12: 00000000000000c6 [ 388.050221][T11211] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 388.092225][T11211] FS: 00007f70960006c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 388.111549][T11211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.132122][T11211] CR2: 000055565ca5ae08 CR3: 0000000078500000 CR4: 00000000003526f0 [ 388.149891][T11211] Kernel panic - not syncing: Fatal exception [ 388.156325][T11211] Kernel Offset: disabled [ 388.160659][T11211] Rebooting in 86400 seconds..