last executing test programs: 18.020998042s ago: executing program 2 (id=5633): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 17.680978491s ago: executing program 2 (id=5637): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) 17.361045703s ago: executing program 2 (id=5642): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) 17.213443704s ago: executing program 2 (id=5645): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000035c0)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040)=0x1, 0x100000000000001) 16.930630897s ago: executing program 2 (id=5647): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) socket$unix(0x1, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 16.760668277s ago: executing program 2 (id=5649): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(0x0, 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./control\x00', 0x0) fchdir(r3) close_range(r2, 0xffffffffffffffff, 0x0) 7.942767334s ago: executing program 4 (id=5709): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f00000039c0)) 7.665196494s ago: executing program 0 (id=5711): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7e}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8936, &(0x7f0000000000)) 7.609224079s ago: executing program 4 (id=5713): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r6 = open(0x0, 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./control\x00', 0x0) fchdir(r3) close_range(r2, 0xffffffffffffffff, 0x0) 7.060114317s ago: executing program 4 (id=5716): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) socket$unix(0x1, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 5.974733791s ago: executing program 1 (id=5719): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) 5.895879703s ago: executing program 1 (id=5720): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4.910155013s ago: executing program 0 (id=5722): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) 4.909360609s ago: executing program 1 (id=5723): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 4.663100417s ago: executing program 1 (id=5725): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, 0x0, 0x0) fchdir(r3) close_range(r2, 0xffffffffffffffff, 0x0) 4.253622823s ago: executing program 1 (id=5727): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) 3.366738716s ago: executing program 4 (id=5728): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e000100000000000800410000000000", @ANYRESHEX], 0x1c}], 0x1}, 0x4080) 1.617726158s ago: executing program 0 (id=5732): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7e}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8936, &(0x7f0000000000)) 1.247018221s ago: executing program 1 (id=5734): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) socket$unix(0x1, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) umount2(0x0, 0x2) 1.038501319s ago: executing program 3 (id=5736): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, 0x0, 0x0) fchdir(r3) close_range(r2, 0xffffffffffffffff, 0x0) 844.535149ms ago: executing program 3 (id=5737): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) 752.737338ms ago: executing program 3 (id=5738): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x0) 635.053631ms ago: executing program 4 (id=5739): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) 634.315421ms ago: executing program 0 (id=5740): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 578.930659ms ago: executing program 3 (id=5741): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES8=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 400.790821ms ago: executing program 0 (id=5742): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 330.536681ms ago: executing program 4 (id=5743): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) 330.223013ms ago: executing program 3 (id=5744): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x12, r3, 0x0) 170.003598ms ago: executing program 3 (id=5745): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 0s ago: executing program 0 (id=5746): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, 0x0, 0x0) fchdir(r3) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 86.680112][ T5811] cgroup: Unknown subsys name 'net' [ 86.812164][ T5811] cgroup: Unknown subsys name 'cpuset' [ 86.821873][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.566764][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.029919][ T10] cfg80211: failed to load regulatory.db [ 93.331021][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.339753][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.344960][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.349095][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.362596][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.364797][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.372191][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.380392][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.384527][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.393331][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.399716][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.405841][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.419783][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.420356][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.428054][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.436071][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.442856][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.449155][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.457434][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.468878][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.469321][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.487645][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.490155][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.503008][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.543683][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.133837][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 94.232065][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 94.396879][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 94.435658][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 94.560015][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.567320][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.576239][ T5838] bridge_slave_0: entered allmulticast mode [ 94.583897][ T5838] bridge_slave_0: entered promiscuous mode [ 94.641771][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.649399][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.656700][ T5838] bridge_slave_1: entered allmulticast mode [ 94.664333][ T5838] bridge_slave_1: entered promiscuous mode [ 94.672569][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.679988][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.687199][ T5828] bridge_slave_0: entered allmulticast mode [ 94.694652][ T5828] bridge_slave_0: entered promiscuous mode [ 94.708675][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 94.740385][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.747646][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.755310][ T5828] bridge_slave_1: entered allmulticast mode [ 94.763052][ T5828] bridge_slave_1: entered promiscuous mode [ 94.811506][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.890111][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.913268][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.920608][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.927775][ T5829] bridge_slave_0: entered allmulticast mode [ 94.935333][ T5829] bridge_slave_0: entered promiscuous mode [ 94.956454][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.963923][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.971704][ T5831] bridge_slave_0: entered allmulticast mode [ 94.979407][ T5831] bridge_slave_0: entered promiscuous mode [ 95.005434][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.015666][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.023014][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.030505][ T5829] bridge_slave_1: entered allmulticast mode [ 95.037935][ T5829] bridge_slave_1: entered promiscuous mode [ 95.051506][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.058735][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.065994][ T5831] bridge_slave_1: entered allmulticast mode [ 95.073912][ T5831] bridge_slave_1: entered promiscuous mode [ 95.097493][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.154805][ T5838] team0: Port device team_slave_0 added [ 95.163227][ T5838] team0: Port device team_slave_1 added [ 95.233578][ T5828] team0: Port device team_slave_0 added [ 95.242553][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.255939][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.280402][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.305873][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.313168][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.339188][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.354590][ T5828] team0: Port device team_slave_1 added [ 95.361381][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.368845][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.394806][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.434258][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.468893][ T5835] Bluetooth: hci3: command tx timeout [ 95.482752][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.490205][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.497409][ T5830] bridge_slave_0: entered allmulticast mode [ 95.505080][ T5830] bridge_slave_0: entered promiscuous mode [ 95.541963][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.549394][ T5835] Bluetooth: hci0: command tx timeout [ 95.549432][ T5845] Bluetooth: hci4: command tx timeout [ 95.555217][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.560955][ T5839] Bluetooth: hci1: command tx timeout [ 95.587724][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.605248][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.613004][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.639161][ T5839] Bluetooth: hci2: command tx timeout [ 95.644661][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.658722][ T5829] team0: Port device team_slave_0 added [ 95.664804][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.672142][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.679460][ T5830] bridge_slave_1: entered allmulticast mode [ 95.686754][ T5830] bridge_slave_1: entered promiscuous mode [ 95.710107][ T5831] team0: Port device team_slave_0 added [ 95.724928][ T5829] team0: Port device team_slave_1 added [ 95.761261][ T5831] team0: Port device team_slave_1 added [ 95.829178][ T5838] hsr_slave_0: entered promiscuous mode [ 95.836081][ T5838] hsr_slave_1: entered promiscuous mode [ 95.871872][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.910036][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.917115][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.943374][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.955637][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.963058][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.989376][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.003243][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.046692][ T5828] hsr_slave_0: entered promiscuous mode [ 96.053463][ T5828] hsr_slave_1: entered promiscuous mode [ 96.060382][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 96.066223][ T5828] Cannot create hsr debugfs directory [ 96.072850][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.080047][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.106044][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.118304][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.125295][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.151428][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.185965][ T5830] team0: Port device team_slave_0 added [ 96.194997][ T5830] team0: Port device team_slave_1 added [ 96.290159][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.297172][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.323510][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.370847][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.378309][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.404414][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.484895][ T5831] hsr_slave_0: entered promiscuous mode [ 96.491572][ T5831] hsr_slave_1: entered promiscuous mode [ 96.498156][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 96.504046][ T5831] Cannot create hsr debugfs directory [ 96.573154][ T5829] hsr_slave_0: entered promiscuous mode [ 96.579852][ T5829] hsr_slave_1: entered promiscuous mode [ 96.586091][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 96.591959][ T5829] Cannot create hsr debugfs directory [ 96.705204][ T5830] hsr_slave_0: entered promiscuous mode [ 96.712070][ T5830] hsr_slave_1: entered promiscuous mode [ 96.718594][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 96.724346][ T5830] Cannot create hsr debugfs directory [ 97.059668][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.097673][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.110308][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.143931][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.235869][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.246836][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.275029][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.285844][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.360071][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.373327][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.393574][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.409713][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.530823][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.541628][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.553921][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.560770][ T5839] Bluetooth: hci3: command tx timeout [ 97.573342][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.629683][ T5839] Bluetooth: hci1: command tx timeout [ 97.635452][ T5845] Bluetooth: hci0: command tx timeout [ 97.635600][ T5835] Bluetooth: hci4: command tx timeout [ 97.673611][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.708537][ T5835] Bluetooth: hci2: command tx timeout [ 97.725868][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.737226][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.750832][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.761895][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.796583][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.836766][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.844085][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.862999][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.870216][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.953731][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.004827][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.032065][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.063535][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.112033][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.119287][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.137532][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.182019][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.192653][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.199883][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.225788][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.274520][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.282010][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.334323][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.341563][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.354170][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.372172][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.393261][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.400548][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.435499][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.442725][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.454437][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.461615][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.485162][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.492403][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.604275][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.829696][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.864110][ T5838] veth0_vlan: entered promiscuous mode [ 98.927282][ T5838] veth1_vlan: entered promiscuous mode [ 99.111275][ T5838] veth0_macvtap: entered promiscuous mode [ 99.129191][ T5828] veth0_vlan: entered promiscuous mode [ 99.146331][ T5838] veth1_macvtap: entered promiscuous mode [ 99.182892][ T5828] veth1_vlan: entered promiscuous mode [ 99.252340][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.272851][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.319435][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.331493][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.346224][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.373345][ T4092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.384018][ T4092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.411593][ T4092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.424872][ T5828] veth0_macvtap: entered promiscuous mode [ 99.440876][ T4092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.463016][ T5828] veth1_macvtap: entered promiscuous mode [ 99.594447][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.630643][ T5835] Bluetooth: hci3: command tx timeout [ 99.672528][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.676643][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.684237][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.702812][ T5830] veth0_vlan: entered promiscuous mode [ 99.709848][ T5835] Bluetooth: hci0: command tx timeout [ 99.710002][ T5845] Bluetooth: hci1: command tx timeout [ 99.718614][ T5835] Bluetooth: hci4: command tx timeout [ 99.748279][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.765168][ T4092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.789100][ T5835] Bluetooth: hci2: command tx timeout [ 99.802465][ T5829] veth0_vlan: entered promiscuous mode [ 99.810105][ T4092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.820271][ T4092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.830390][ T5830] veth1_vlan: entered promiscuous mode [ 99.842808][ T4092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.850817][ T5829] veth1_vlan: entered promiscuous mode [ 99.859678][ T4092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.971403][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.976759][ T5831] veth0_vlan: entered promiscuous mode [ 100.034851][ T5829] veth0_macvtap: entered promiscuous mode [ 100.057014][ T5830] veth0_macvtap: entered promiscuous mode [ 100.078884][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.086844][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.104409][ T5831] veth1_vlan: entered promiscuous mode [ 100.140205][ T5830] veth1_macvtap: entered promiscuous mode [ 100.161219][ T5829] veth1_macvtap: entered promiscuous mode [ 100.247189][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.266393][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.314625][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.331464][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.381224][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.404023][ T5831] veth0_macvtap: entered promiscuous mode [ 100.431920][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.463504][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.487027][ T5831] veth1_macvtap: entered promiscuous mode [ 100.493717][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.531824][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.541844][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.570111][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.584745][ T2137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.630387][ T2137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.658664][ T2137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.667528][ T2137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.755789][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.834919][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.883982][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.897170][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.936186][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.936471][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.956329][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.977952][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.095350][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 101.124327][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.138030][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.151516][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.176794][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.360899][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.418056][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.439740][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.447625][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.639008][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.646887][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.718076][ T5835] Bluetooth: hci3: command tx timeout [ 101.789513][ T5835] Bluetooth: hci1: command tx timeout [ 101.795028][ T5835] Bluetooth: hci4: command tx timeout [ 101.800629][ T5845] Bluetooth: hci0: command tx timeout [ 101.869296][ T5845] Bluetooth: hci2: command tx timeout [ 102.130548][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.298825][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 102.311807][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.357920][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.398470][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.407575][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.482210][ T5897] usb 4-1: config 0 descriptor?? [ 103.001430][ T5897] usbhid 4-1:0.0: can't add hid device: -71 [ 103.027327][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 103.042507][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.081863][ T5897] usb 4-1: USB disconnect, device number 2 [ 114.704269][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 119.400345][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 119.863391][ T6353] netlink: 44 bytes leftover after parsing attributes in process `syz.3.188'. [ 131.488336][ T6558] capability: warning: `syz.4.277' uses 32-bit capabilities (legacy support in use) [ 133.975403][ T6629] netlink: 212 bytes leftover after parsing attributes in process `syz.2.310'. [ 135.099311][ T6659] +$<¶: renamed from bridge0 (while UP) [ 138.117613][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.127379][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.842271][ T6890] binder: Unknown parameter 'defcontext01777777777777777777777' [ 149.156792][ T6929] binder: Unknown parameter 'defcontext01777777777777777777777' [ 150.564188][ T6957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.457'. [ 152.179782][ T7003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.475'. [ 152.825479][ T7025] binder: 7024:7025 ioctl c018620c 200000000000 returned -22 [ 153.018689][ T7030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.490'. [ 153.621058][ T7048] process 'syz.1.498' launched '/dev/fd/5' with NULL argv: empty string added [ 154.242360][ T7065] binder: 7064:7065 ioctl c0306201 2000000004c0 returned -22 [ 154.850401][ T7083] netlink: 37 bytes leftover after parsing attributes in process `syz.3.516'. [ 155.237293][ T7097] capability: warning: `syz.0.507' uses deprecated v2 capabilities in a way that may be insecure [ 156.138068][ T7128] tap0: tun_chr_ioctl cmd 1074025675 [ 156.148110][ T7128] tap0: persist enabled [ 158.727194][ T7237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.585'. [ 159.089671][ T7251] overlayfs: missing 'lowerdir' [ 159.233781][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.946862][ T7281] binder: 7280:7281 ioctl c0306201 2000000004c0 returned -22 [ 160.168181][ T7288] netlink: 72 bytes leftover after parsing attributes in process `syz.4.609'. [ 160.526766][ T7306] netlink: 212 bytes leftover after parsing attributes in process `syz.2.618'. [ 160.890597][ T7319] binder: 7316:7319 ioctl c0306201 2000000004c0 returned -22 [ 162.526737][ T7355] netlink: 'syz.2.638': attribute type 4 has an invalid length. [ 162.571156][ T7355] netlink: 'syz.2.638': attribute type 6 has an invalid length. [ 162.590251][ T7355] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.638'. [ 166.772336][ T7436] binder: Unknown parameter 'defcontext01777777777777777777777' [ 169.419799][ T7488] netlink: 44 bytes leftover after parsing attributes in process `syz.0.698'. [ 170.858870][ T7519] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 171.080988][ T7523] netlink: 212 bytes leftover after parsing attributes in process `syz.0.715'. [ 172.188214][ T1151] tipc: Subscription rejected, illegal request [ 173.171719][ T7563] netlink: 212 bytes leftover after parsing attributes in process `syz.1.730'. [ 175.388278][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 175.394558][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 176.263710][ T7598] binder: Bad value for 'max' [ 181.353012][ T7675] binder: Unknown parameter 'defcontext01777777777777777777777' [ 185.251727][ T60] Bluetooth: hci5: Frame reassembly failed (-84) [ 185.404886][ T7702] netlink: 44 bytes leftover after parsing attributes in process `syz.4.792'. [ 185.790750][ T7706] binder: Unknown parameter 'defcontext01777777777777777777777' [ 185.949729][ T7708] binder: 7707:7708 ioctl c0306201 2000000004c0 returned -22 [ 186.590912][ T7729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.808'. [ 187.308041][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 187.314552][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 190.432420][ T7801] netlink: 212 bytes leftover after parsing attributes in process `syz.1.840'. [ 192.091368][ T7844] binder: 7842:7844 ioctl c0306201 2000000004c0 returned -22 [ 192.662547][ T7858] netlink: 212 bytes leftover after parsing attributes in process `syz.2.865'. [ 193.954043][ T7894] binder: Unknown parameter 'defcontext01777777777777777777777' [ 194.769663][ T7918] netlink: 212 bytes leftover after parsing attributes in process `syz.3.892'. [ 195.012586][ T7926] binder: Unknown parameter 'defcontext01777777777777777777777' [ 195.155844][ T7933] random: crng reseeded on system resumption [ 195.369431][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.899'. [ 195.991867][ T7947] netlink: 212 bytes leftover after parsing attributes in process `syz.3.907'. [ 197.148040][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.563943][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.571298][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.390909][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.111001][ T8090] netlink: 212 bytes leftover after parsing attributes in process `syz.4.973'. [ 214.675156][ T8282] binder: Unknown parameter 'defcontext01777777777777777777777' [ 214.748306][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.441860][ T8313] binder: Unknown parameter 'defcontext01777777777777777777777' [ 215.996434][ T2137] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.091986][ T8344] binder: Unknown parameter 'defcontext01777777777777777777777' [ 216.987919][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 217.005304][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 217.005327][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 217.011588][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 217.018083][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 218.028138][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 218.034539][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 218.376462][ T8376] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1103'. [ 222.323524][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 223.073755][ T8495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1160'. [ 223.493884][ T8504] tmpfs: Bad value for 'nr_blocks' [ 224.355302][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 224.361718][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 225.494467][ T8543] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1182'. [ 228.312650][ T8587] binder: 8586:8587 ioctl c0306201 200000000340 returned -14 [ 229.554007][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 230.121540][ T8620] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1218'. [ 232.291737][ T8673] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1243'. [ 233.529048][ T8703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1256'. [ 236.771817][ T8788] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1294'. [ 237.285786][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 238.453886][ T892] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 238.519151][ T892] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.160066][ T8910] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1353'. [ 249.890681][ T5910] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 249.914069][ T5910] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.631387][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.684171][ T24] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.313096][ T9156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1462'. [ 254.596881][ T9161] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1451'. [ 255.244414][ T9183] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1473'. [ 255.933728][ T9198] mmap: syz.2.1478 (9198) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 258.152212][ T9227] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1493'. [ 260.871277][ T9288] netlink: 'syz.4.1520': attribute type 4 has an invalid length. [ 260.994336][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.008131][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.145379][ T9292] binder: Unknown parameter 'defcontext01777777777777777777777' [ 268.871845][ T9382] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1563'. [ 269.925204][ T9410] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1575'. [ 271.870283][ T9462] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1598'. [ 273.456228][ T9488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1610'. [ 275.365521][ T9532] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.539499][ T9537] binder: 9536:9537 ioctl c0306201 2000000004c0 returned -22 [ 275.994975][ T9550] cgroup: Unknown subsys name 'cpuset' [ 276.258473][ T9556] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1640'. [ 276.668041][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 276.674531][ T5842] Bluetooth: hci5: command 0x1003 tx timeout [ 276.983594][ T9571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1647'. [ 277.642236][ T9590] binder: 9589:9590 ioctl c0306201 2000000004c0 returned -22 [ 278.345762][ T9616] binder: 9613:9616 ioctl c0306201 2000000004c0 returned -22 [ 279.479337][ T9648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.189453][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 283.494616][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1737'. [ 285.308073][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 289.424773][ T9837] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1769'. [ 289.608613][ T9841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1771'. [ 290.243203][ T9863] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1782'. [ 295.701197][ T9947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 306.987705][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 307.031162][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.269769][T10346] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 314.315029][T10348] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 314.673745][T10360] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2008'. [ 314.835427][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 314.841965][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 316.629858][T10414] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2032'. [ 316.648329][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2032'. [ 316.678045][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2032'. [ 317.225968][T10430] binder: 10429:10430 ioctl c0306201 2000000004c0 returned -22 [ 318.049207][T10458] binder: 10457:10458 ioctl c0306201 2000000004c0 returned -22 [ 318.473602][T10469] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2044'. [ 318.493374][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2044'. [ 318.503799][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2044'. [ 318.513538][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 318.682336][T10475] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 318.743152][T10475] ptrace attach of ""[10476] was attempted by "./syz-executor exec"[10475] [ 319.017323][T10478] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2059'. [ 321.513968][T10532] 9pnet_fd: p9_fd_create_tcp (10532): problem connecting socket to 127.0.0.1 [ 321.828960][T10540] binder: Unknown parameter 'defcontext01777777777777777777777' [ 322.433738][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.440322][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.269301][T10719] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2169'. [ 326.570024][T10725] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2173'. [ 329.488259][T10769] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2192'. [ 331.788281][T10809] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2210'. [ 331.808080][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2210'. [ 331.850474][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 333.352430][T10836] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2223'. [ 335.061812][T10855] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2234'. [ 335.111137][T10857] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2227'. [ 335.348894][T10861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 337.315033][T10924] ======================================================= [ 337.315033][T10924] WARNING: The mand mount option has been deprecated and [ 337.315033][T10924] and is ignored by this kernel. Remove the mand [ 337.315033][T10924] option from the mount to silence this warning. [ 337.315033][T10924] ======================================================= [ 337.385961][T10924] binder: Unknown parameter 'context' [ 339.163563][T10956] binder: Unknown parameter 'defcontext01777777777777777777777' [ 340.142146][T10980] binder: Unknown parameter 'defcontext01777777777777777777777' [ 345.981979][T11066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.001616][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 354.298630][T11177] binder: Unknown parameter 'defcontext01777777777777777777777' [ 359.821555][T11257] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2422'. [ 362.388722][T11344] fuse: Bad value for 'group_id' [ 362.393736][T11344] fuse: Bad value for 'group_id' [ 362.431532][T11344] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2460'. [ 363.344767][T11374] fuse: Bad value for 'group_id' [ 363.350210][T11374] fuse: Bad value for 'group_id' [ 363.363842][T11374] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2474'. [ 371.590815][T11472] binder: Unknown parameter 'defcontext01777777777777777777777' [ 372.229047][T11492] tmpfs: Bad value for 'huge' [ 372.307817][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 372.487901][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 372.504695][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 372.534422][ T10] usb 5-1: config 0 has no interface number 0 [ 372.561289][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 372.591251][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 372.617007][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 372.643179][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 372.662783][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.690120][ T10] usb 5-1: Product: syz [ 372.704675][ T10] usb 5-1: Manufacturer: syz [ 372.719223][ T10] usb 5-1: SerialNumber: syz [ 372.745407][ T10] usb 5-1: config 0 descriptor?? [ 372.766006][T11490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.788220][T11490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.942892][T11505] binder: Unknown parameter 'defcontext01777777777777777777777' [ 373.012988][T11490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.043611][T11490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.301381][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 373.346556][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 373.395988][ T10] usb 5-1: USB disconnect, device number 2 [ 373.925812][T11520] fuse: Unknown parameter 'grou00000000000000000000' [ 373.968285][T11520] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2541'. [ 374.491338][T11533] binder: Unknown parameter 'defcontext01777777777777777777777' [ 374.676809][T11537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 375.613157][T11563] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 379.643278][T11655] netlink: 'syz.1.2601': attribute type 64 has an invalid length. [ 379.657796][T11655] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2601'. [ 381.614943][T11707] binder: Unknown parameter 'defcontext' [ 383.886153][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.895097][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.469188][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.478786][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.487966][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.506213][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.516311][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.317375][T11782] chnl_net:caif_netlink_parms(): no params data found [ 387.108623][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.115907][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.139318][T11782] bridge_slave_0: entered allmulticast mode [ 387.160293][T11782] bridge_slave_0: entered promiscuous mode [ 387.181162][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.195513][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.216743][T11782] bridge_slave_1: entered allmulticast mode [ 387.236691][T11782] bridge_slave_1: entered promiscuous mode [ 387.396218][ T1151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.550906][ T5839] Bluetooth: hci5: command tx timeout [ 387.592581][ T1151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.629488][T11782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.653699][T11782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.900110][ T1151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.981282][T11782] team0: Port device team_slave_0 added [ 388.005526][T11782] team0: Port device team_slave_1 added [ 388.146588][ T1151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.213577][T11782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.227936][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.302112][T11782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.437981][T11782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.470521][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.548801][T11782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.742930][T11782] hsr_slave_0: entered promiscuous mode [ 388.762597][T11782] hsr_slave_1: entered promiscuous mode [ 388.779339][T11782] debugfs: 'hsr0' already exists in 'hsr' [ 388.795431][T11782] Cannot create hsr debugfs directory [ 389.200900][ T1151] bridge_slave_1: left allmulticast mode [ 389.207071][ T1151] bridge_slave_1: left promiscuous mode [ 389.232689][ T1151] +$<¶: port 2(bridge_slave_1) entered disabled state [ 389.256568][ T1151] bridge_slave_0: left allmulticast mode [ 389.267997][ T1151] bridge_slave_0: left promiscuous mode [ 389.278568][ T1151] +$<¶: port 1(bridge_slave_0) entered disabled state [ 389.628174][ T5839] Bluetooth: hci5: command tx timeout [ 389.867485][T11831] fuse: Bad value for 'fd' [ 390.035450][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.050894][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.062549][ T1151] bond0 (unregistering): Released all slaves [ 390.106453][T11831] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2677'. [ 390.546611][T11845] Zero length message leads to an empty skb [ 391.080651][T11867] fuse: Bad value for 'fd' [ 391.089190][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2689'. [ 391.141238][ T1151] hsr_slave_0: left promiscuous mode [ 391.188203][ T1151] hsr_slave_1: left promiscuous mode [ 391.194745][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.275953][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.295379][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.312663][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.377446][ T1151] veth1_macvtap: left promiscuous mode [ 391.421086][ T1151] veth0_macvtap: left promiscuous mode [ 391.426916][ T1151] veth1_vlan: left promiscuous mode [ 391.457914][ T1151] veth0_vlan: left promiscuous mode [ 391.707942][ T5839] Bluetooth: hci5: command tx timeout [ 392.906281][T11910] binder: 11909:11910 ioctl c00c620f 0 returned -14 [ 393.429519][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 393.448377][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 393.611155][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 393.647828][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 393.654971][ T5897] usb 2-1: config 8 has an invalid interface number: 203 but max is 0 [ 393.673715][ T5897] usb 2-1: config 8 has no interface number 0 [ 393.684136][ T5897] usb 2-1: config 8 interface 203 has no altsetting 0 [ 393.700365][ T5897] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 393.717800][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.736333][ T5897] usb 2-1: Product: syz [ 393.740904][ T5897] usb 2-1: Manufacturer: syz [ 393.745540][ T5897] usb 2-1: SerialNumber: syz [ 393.801179][ T5839] Bluetooth: hci5: command tx timeout [ 394.655689][ T5897] port100 2-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 394.695508][ T5897] usb 2-1: USB disconnect, device number 2 [ 395.574930][T11867] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2688'. [ 395.851906][T11925] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 396.726028][T11955] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2718'. [ 397.117107][T11782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 397.150076][T11782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 397.209135][T11782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 397.272006][T11782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 398.059523][T11782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.172351][T11782] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.196986][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.204378][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.275609][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.282895][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.499401][T11782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.934455][T12012] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.236490][T11782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.478999][T11782] veth0_vlan: entered promiscuous mode [ 399.531157][T11782] veth1_vlan: entered promiscuous mode [ 399.559278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 399.683863][T11782] veth0_macvtap: entered promiscuous mode [ 399.732151][T11782] veth1_macvtap: entered promiscuous mode [ 399.764190][T12030] binder: Unknown parameter 'defconte01777777777777777777777' [ 399.835084][T11782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.887968][T11782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.922568][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.950895][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.980730][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.018308][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.238365][ T2137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.246266][ T2137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.365059][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.396773][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.600967][T12211] binder: Unknown parameter 'max000 ð00' [ 409.172726][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2827'. [ 410.663586][T12291] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2850'. [ 413.286098][T12337] kvm: emulating exchange as write [ 416.361028][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 416.575045][T12408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.062356][T12461] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 424.354722][T12505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.769348][T12532] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 428.566796][T12588] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2991'. [ 428.826851][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 428.871218][ T5954] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 430.223670][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 430.233056][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 430.241139][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.249281][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.258288][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.204075][T12617] chnl_net:caif_netlink_parms(): no params data found [ 431.831952][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.169939][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.347913][ T5839] Bluetooth: hci4: command tx timeout [ 432.751657][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.867313][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.896422][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.908985][T12617] bridge_slave_0: entered allmulticast mode [ 432.928100][T12617] bridge_slave_0: entered promiscuous mode [ 433.050668][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.113912][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.144846][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.168136][T12617] bridge_slave_1: entered allmulticast mode [ 433.197034][T12617] bridge_slave_1: entered promiscuous mode [ 433.317550][T12617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.355635][T12617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.554673][T12617] team0: Port device team_slave_0 added [ 433.646794][T12617] team0: Port device team_slave_1 added [ 433.888775][T12617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.912170][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.978452][T12617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.034019][T12676] 9p: Bad value for 'rfdno' [ 434.050571][T12617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.079023][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.163603][T12617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.346689][ T1151] bridge_slave_1: left allmulticast mode [ 434.383379][ T1151] bridge_slave_1: left promiscuous mode [ 434.403165][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.428545][ T5839] Bluetooth: hci4: command tx timeout [ 434.509273][ T1151] bridge_slave_0: left allmulticast mode [ 434.514993][ T1151] bridge_slave_0: left promiscuous mode [ 434.528447][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.781589][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.830552][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.851277][ T1151] bond0 (unregistering): Released all slaves [ 436.046272][T12617] hsr_slave_0: entered promiscuous mode [ 436.079471][T12617] hsr_slave_1: entered promiscuous mode [ 436.224618][T12709] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.510655][ T5839] Bluetooth: hci4: command tx timeout [ 437.585766][ T1151] hsr_slave_0: left promiscuous mode [ 437.598935][ T1151] hsr_slave_1: left promiscuous mode [ 437.616804][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.634613][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.686516][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.708021][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.809993][ T1151] veth1_macvtap: left promiscuous mode [ 437.836672][ T1151] veth0_macvtap: left promiscuous mode [ 437.847201][ T1151] veth1_vlan: left promiscuous mode [ 437.870725][ T1151] veth0_vlan: left promiscuous mode [ 438.588075][ T5839] Bluetooth: hci4: command tx timeout [ 439.374688][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 439.488157][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 440.722715][T12763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 441.614712][T12617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 441.682115][T12617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 441.737416][T12617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 441.789402][T12617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.152245][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.241781][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.300725][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.308077][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.385271][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.392618][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.569819][T12617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.200658][T12617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.367750][T12617] veth0_vlan: entered promiscuous mode [ 443.424277][T12617] veth1_vlan: entered promiscuous mode [ 443.550437][T12617] veth0_macvtap: entered promiscuous mode [ 443.599384][T12617] veth1_macvtap: entered promiscuous mode [ 443.681300][T12617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.722853][T12617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.802004][ T2137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.821844][ T2137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.908952][ T2137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.944033][ T2137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.184107][ T2137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.238842][ T2137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.323270][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.341630][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.314205][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.323295][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.916026][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.934324][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.943364][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.952623][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.963753][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.731861][T12873] chnl_net:caif_netlink_parms(): no params data found [ 447.679675][T12873] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.686987][T12873] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.728012][T12873] bridge_slave_0: entered allmulticast mode [ 447.747868][T12873] bridge_slave_0: entered promiscuous mode [ 447.772533][T12873] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.811108][T12873] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.847083][T12873] bridge_slave_1: entered allmulticast mode [ 447.869690][T12873] bridge_slave_1: entered promiscuous mode [ 448.033836][ T5839] Bluetooth: hci1: command tx timeout [ 448.136661][T12873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.200822][T12873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.653137][T12873] team0: Port device team_slave_0 added [ 448.682066][T12873] team0: Port device team_slave_1 added [ 449.212154][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.362218][T12873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.386700][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.467772][T12873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.503594][T12873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.528386][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.608067][T12873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.791196][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.080246][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.118264][ T5839] Bluetooth: hci1: command tx timeout [ 450.148203][T12873] hsr_slave_0: entered promiscuous mode [ 450.166424][T12873] hsr_slave_1: entered promiscuous mode [ 450.193465][T12873] debugfs: 'hsr0' already exists in 'hsr' [ 450.218756][T12873] Cannot create hsr debugfs directory [ 450.514586][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.385888][ T60] bridge_slave_1: left allmulticast mode [ 451.403692][ T60] bridge_slave_1: left promiscuous mode [ 451.440848][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.521946][ T60] bridge_slave_0: left allmulticast mode [ 451.537761][ T60] bridge_slave_0: left promiscuous mode [ 451.543822][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.203301][ T5839] Bluetooth: hci1: command tx timeout [ 453.041338][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.062337][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.074153][ T60] bond0 (unregistering): Released all slaves [ 454.164276][T13078] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3140'. [ 454.268260][ T5839] Bluetooth: hci1: command tx timeout [ 454.338729][ T60] hsr_slave_0: left promiscuous mode [ 454.368290][ T60] hsr_slave_1: left promiscuous mode [ 454.385888][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.418015][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.459227][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.466777][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.535457][ T60] veth1_macvtap: left promiscuous mode [ 454.545308][ T60] veth0_macvtap: left promiscuous mode [ 454.562911][ T60] veth1_vlan: left promiscuous mode [ 454.582592][ T60] veth0_vlan: left promiscuous mode [ 456.628761][ T60] team0 (unregistering): Port device team_slave_1 removed [ 456.854835][ T60] team0 (unregistering): Port device team_slave_0 removed [ 458.518189][T13132] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3163'. [ 459.012371][T12873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 459.105326][T12873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 459.229860][T12873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 459.321438][T12873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 459.776676][T12873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.891096][T12873] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.932477][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.939747][T13117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.003608][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.010890][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.949898][T12873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.802192][T12873] veth0_vlan: entered promiscuous mode [ 461.974803][T12873] veth1_vlan: entered promiscuous mode [ 462.098606][T12873] veth0_macvtap: entered promiscuous mode [ 462.140926][T12873] veth1_macvtap: entered promiscuous mode [ 462.225781][T12873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.243321][T12873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.310642][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.330663][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.396532][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.418226][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.655425][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.693261][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.780180][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.807752][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.019744][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.033707][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.041869][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.058857][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.066637][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.085100][T13250] chnl_net:caif_netlink_parms(): no params data found [ 465.561010][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.569996][T13250] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.577302][T13250] bridge_slave_0: entered allmulticast mode [ 465.605958][T13250] bridge_slave_0: entered promiscuous mode [ 465.634713][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.677931][T13250] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.695971][T13250] bridge_slave_1: entered allmulticast mode [ 465.720068][T13250] bridge_slave_1: entered promiscuous mode [ 466.064038][T13250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.117117][ T5842] Bluetooth: hci3: command tx timeout [ 466.431783][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.520753][T13250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.729994][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.860589][T13250] team0: Port device team_slave_0 added [ 467.012231][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.081121][T13250] team0: Port device team_slave_1 added [ 467.399180][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.470672][T13250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.498140][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.584204][T13250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.629124][T13250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.667152][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.726869][T13250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.951777][T13250] hsr_slave_0: entered promiscuous mode [ 467.979417][T13250] hsr_slave_1: entered promiscuous mode [ 467.986159][T13250] debugfs: 'hsr0' already exists in 'hsr' [ 468.018037][T13250] Cannot create hsr debugfs directory [ 468.187974][ T5842] Bluetooth: hci3: command tx timeout [ 468.473040][ T13] bridge_slave_1: left allmulticast mode [ 468.506635][ T13] bridge_slave_1: left promiscuous mode [ 468.530489][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.601897][ T13] bridge_slave_0: left allmulticast mode [ 468.607620][ T13] bridge_slave_0: left promiscuous mode [ 468.658161][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.699371][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.753947][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.786189][ T13] bond0 (unregistering): Released all slaves [ 470.269224][ T5842] Bluetooth: hci3: command tx timeout [ 470.665319][ T13] hsr_slave_0: left promiscuous mode [ 470.705398][ T13] hsr_slave_1: left promiscuous mode [ 470.713598][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.759954][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.822207][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.836867][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.966676][ T13] veth1_macvtap: left promiscuous mode [ 471.003765][ T13] veth0_macvtap: left promiscuous mode [ 471.038433][ T13] veth1_vlan: left promiscuous mode [ 471.047982][ T13] veth0_vlan: left promiscuous mode [ 472.357950][ T5842] Bluetooth: hci3: command tx timeout [ 472.385341][ T13] team0 (unregistering): Port device team_slave_1 removed [ 472.534846][ T13] team0 (unregistering): Port device team_slave_0 removed [ 474.155706][T13250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.276480][T13250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.364705][T13250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.462213][T13250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.881486][T13250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.964149][T13250] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.021554][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.029086][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.073911][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.081203][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.931872][T13250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.129840][T13250] veth0_vlan: entered promiscuous mode [ 476.176976][T13250] veth1_vlan: entered promiscuous mode [ 476.302033][T13250] veth0_macvtap: entered promiscuous mode [ 476.345053][T13250] veth1_macvtap: entered promiscuous mode [ 476.438798][T13250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.473029][T13250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.544065][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.568621][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.610132][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.662638][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.933132][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.990903][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.026126][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.072758][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.133314][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.146307][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.199903][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.218386][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.227943][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.876869][T13486] chnl_net:caif_netlink_parms(): no params data found [ 479.359714][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.740225][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.797138][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.815023][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.838522][T13486] bridge_slave_0: entered allmulticast mode [ 479.865744][T13486] bridge_slave_0: entered promiscuous mode [ 479.929968][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.947998][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.965724][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.993968][T13486] bridge_slave_1: entered allmulticast mode [ 480.011430][T13486] bridge_slave_1: entered promiscuous mode [ 480.104092][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.244507][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.268667][ T5839] Bluetooth: hci2: command tx timeout [ 480.294438][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.541968][T13486] team0: Port device team_slave_0 added [ 480.580170][T13486] team0: Port device team_slave_1 added [ 480.772449][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.787162][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.823799][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.977430][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.019299][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.087791][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.552474][ T12] bridge_slave_1: left allmulticast mode [ 481.577802][ T12] bridge_slave_1: left promiscuous mode [ 481.583695][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.705459][ T12] bridge_slave_0: left allmulticast mode [ 481.711820][ T12] bridge_slave_0: left promiscuous mode [ 481.717664][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.350916][ T5839] Bluetooth: hci2: command tx timeout [ 483.398154][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.411238][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.450352][ T12] bond0 (unregistering): Released all slaves [ 483.504841][T13486] hsr_slave_0: entered promiscuous mode [ 483.529469][T13486] hsr_slave_1: entered promiscuous mode [ 483.576785][T13486] debugfs: 'hsr0' already exists in 'hsr' [ 483.617874][T13486] Cannot create hsr debugfs directory [ 484.428933][ T5839] Bluetooth: hci2: command tx timeout [ 485.508086][ T12] hsr_slave_0: left promiscuous mode [ 485.570539][ T12] hsr_slave_1: left promiscuous mode [ 485.578815][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.586254][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.695942][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.717786][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.886319][ T12] veth1_macvtap: left promiscuous mode [ 485.907858][ T12] veth0_macvtap: left promiscuous mode [ 485.913633][ T12] veth1_vlan: left promiscuous mode [ 485.967235][ T12] veth0_vlan: left promiscuous mode [ 486.517796][ T5839] Bluetooth: hci2: command tx timeout [ 488.894988][ T12] team0 (unregistering): Port device team_slave_1 removed [ 489.018381][ T12] team0 (unregistering): Port device team_slave_0 removed [ 490.983002][T13681] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3337'. [ 492.478094][T13486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.555645][T13486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.599060][T13486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.682691][T13486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.718506][T13728] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3353'. [ 492.982377][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.074566][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.113887][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.121191][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.163766][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.171088][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.933345][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.288832][T13780] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3366'. [ 494.344403][T13486] veth0_vlan: entered promiscuous mode [ 494.435040][T13486] veth1_vlan: entered promiscuous mode [ 494.585741][T13486] veth0_macvtap: entered promiscuous mode [ 494.631335][T13486] veth1_macvtap: entered promiscuous mode [ 494.772622][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.825030][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.924940][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.957389][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.025525][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.057965][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.368263][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.376147][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.753350][ T4092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.807762][ T4092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.088463][T13906] binder: 13904:13906 ioctl c00c620f 0 returned -14 [ 500.989846][T13995] overlayfs: failed to resolve './file1': -2 [ 503.306563][T14044] overlayfs: failed to resolve './file0': -2 [ 506.756239][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.766839][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.829907][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 510.848031][T14206] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3534'. [ 511.253058][T14219] overlayfs: missing 'workdir' [ 511.807813][T14231] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3546'. [ 513.277909][T14263] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3559'. [ 513.304397][T14262] overlayfs: missing 'workdir' [ 537.143987][T14614] 9p: Bad value for 'rfdno' [ 540.373424][T14662] 9p: Bad value for 'rfdno' [ 542.688592][T14708] overlayfs: missing 'workdir' [ 544.142432][T14740] overlayfs: missing 'workdir' [ 545.843983][T14768] 9pnet_fd: Insufficient options for proto=fd [ 547.180596][T14788] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3791'. [ 547.600289][T14794] 9pnet_fd: Insufficient options for proto=fd [ 548.883142][T14821] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3805'. [ 550.008737][T14847] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3815'. [ 550.177090][T14857] overlayfs: missing 'workdir' [ 550.222912][T14858] 9pnet_fd: Insufficient options for proto=fd [ 551.694020][T14886] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3831'. [ 554.909476][T14911] Bluetooth: hci4: command 0x0406 tx timeout [ 557.311947][T14982] 9p: Bad value for 'rfdno' [ 560.530701][T15025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3887'. [ 565.744009][T15099] overlayfs: missing 'workdir' [ 568.210625][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.217058][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.094373][T15183] binder: 15182:15183 ioctl c00c620f 0 returned -14 [ 570.276190][T14911] Bluetooth: hci1: command 0x0406 tx timeout [ 571.035341][T15202] overlayfs: missing 'workdir' [ 578.216133][T15335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4020'. [ 578.789083][T15345] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4023'. [ 582.850624][T15411] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4057'. [ 583.126393][T15421] overlayfs: failed to clone upperpath [ 583.829769][T15443] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4071'. [ 585.002809][T15469] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4084'. [ 586.708717][T15497] 9p: Could not find request transport: fd0x0000000000000007 [ 590.749992][T14911] Bluetooth: hci3: command 0x0406 tx timeout [ 592.303412][T15570] overlayfs: missing 'workdir' [ 594.502244][T15617] overlayfs: missing 'workdir' [ 598.493189][T15660] overlayfs: failed to clone upperpath [ 599.526085][T15675] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4175'. [ 600.988453][T14911] Bluetooth: hci2: command 0x0406 tx timeout [ 606.012722][T15756] overlayfs: missing 'workdir' [ 608.917095][T15804] overlayfs: missing 'workdir' [ 621.785638][T16058] overlayfs: failed to clone upperpath [ 622.029956][T16066] netlink: 'syz.1.4334': attribute type 4 has an invalid length. [ 622.038069][T16066] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.4334'. [ 624.709159][T16116] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4359'. [ 629.637328][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.644178][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.433163][T16278] overlayfs: failed to clone upperpath [ 640.460069][T16318] overlayfs: missing 'workdir' [ 641.186993][T16334] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4447'. [ 641.862813][T16355] overlayfs: failed to clone upperpath [ 641.956642][T16359] overlayfs: missing 'workdir' [ 644.232857][T16400] overlayfs: missing 'workdir' [ 644.757320][T16417] overlayfs: failed to clone upperpath [ 645.667216][T16446] overlayfs: missing 'workdir' [ 646.124732][T16459] overlayfs: failed to clone upperpath [ 657.491420][T16655] overlayfs: missing 'workdir' [ 657.883383][T16659] 9p: Bad value for 'dfltgid' [ 657.897784][T16659] 9p: Bad value for 'dfltgid' [ 658.071401][T16663] overlayfs: failed to clone upperpath [ 659.138062][T16682] 9p: Could not find request transport: 0xffffffffffffffff [ 659.678573][T16690] overlayfs: missing 'workdir' [ 660.449135][T16697] overlayfs: failed to clone upperpath [ 660.697942][T16699] tipc: Enabling of bearer rejected, media not registered [ 660.861344][T16703] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4590'. [ 662.828089][T16692] syz.3.4574 (16692) used greatest stack depth: 16776 bytes left [ 666.421204][T16757] overlayfs: missing 'workdir' [ 666.688980][T16759] 9p: Bad value for 'dfltgid' [ 666.693726][T16759] 9p: Bad value for 'dfltgid' [ 670.628431][T16824] overlayfs: missing 'workdir' [ 672.643386][T16487] syz.3.4508 (16487) used greatest stack depth: 16376 bytes left [ 673.723072][T16859] 9p: Bad value for 'wfdno' [ 673.767415][T16469] syz.3.4503 (16469) used greatest stack depth: 16368 bytes left [ 674.532314][T16511] syz.3.4516 (16511) used greatest stack depth: 15144 bytes left [ 677.574448][T16612] syz.3.4550 (16612) used greatest stack depth: 14264 bytes left [ 677.744713][T16917] overlayfs: missing 'workdir' [ 684.322413][T16997] netlink: 'syz.1.4713': attribute type 21 has an invalid length. [ 685.359796][T17012] overlayfs: failed to clone upperpath [ 687.189301][T17049] overlayfs: failed to clone upperpath [ 689.987772][T17111] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4758'. [ 691.073911][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.080436][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.170364][T17153] syz.1.4775 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 692.564518][T17167] overlayfs: missing 'workdir' [ 698.468779][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4823'. [ 714.216960][T17488] overlayfs: missing 'workdir' [ 714.940261][T17495] netlink: 'syz.2.4914': attribute type 27 has an invalid length. [ 718.256420][T17531] overlayfs: missing 'workdir' [ 720.127485][T17563] overlayfs: missing 'workdir' [ 722.875262][T17633] 9p: Bad value for 'wfdno' [ 729.116852][T17806] 9p: Bad value for 'rfdno' [ 733.062484][T17873] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5075'. [ 733.486387][T17883] overlayfs: missing 'workdir' [ 735.381717][T17909] overlayfs: failed to clone upperpath [ 736.319531][T17921] overlayfs: failed to clone upperpath [ 738.219266][T17962] 9p: Bad value for 'rfdno' [ 739.131297][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5117'. [ 739.163778][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5117'. [ 744.740115][T18077] tmpfs: Bad value for 'huge' [ 752.522216][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.528673][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.956132][T18101] netlink: 'syz.4.5164': attribute type 64 has an invalid length. [ 761.985833][T18101] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5164'. [ 762.018152][T18101] gretap0: entered allmulticast mode [ 762.024254][T18101] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 762.124543][T18111] overlayfs: missing 'workdir' [ 763.191436][T18153] overlayfs: missing 'workdir' [ 763.200465][T18149] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5182'. [ 764.229403][T18182] overlayfs: missing 'workdir' [ 765.888594][T18231] overlayfs: failed to clone upperpath [ 768.098611][T18274] overlayfs: missing 'workdir' [ 769.439425][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5243'. [ 776.308710][T18421] overlayfs: failed to clone upperpath [ 777.414692][T18436] overlayfs: missing 'workdir' [ 780.493929][T18510] overlayfs: missing 'workdir' [ 782.769710][T18563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5362'. [ 785.644366][T18598] overlayfs: failed to clone upperpath [ 790.753571][T18670] tipc: Enabling of bearer rejected, failed to enable media [ 793.350154][T18709] overlayfs: failed to clone upperpath [ 794.130146][T18730] overlayfs: failed to clone upperpath [ 795.744252][T18763] overlayfs: failed to clone upperpath [ 797.327080][T18794] overlayfs: failed to clone upperpath [ 797.927074][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5474'. [ 798.759726][T18837] overlayfs: failed to clone upperpath [ 799.681159][T18860] overlayfs: failed to clone upperpath [ 800.602965][T18889] overlayfs: failed to clone upperpath [ 803.378028][T18970] overlayfs: missing 'workdir' [ 805.195391][T18991] netlink: 'syz.2.5559': attribute type 4 has an invalid length. [ 808.010963][T19049] overlayfs: missing 'workdir' [ 808.969858][T19075] overlayfs: failed to resolve './file0': -2 [ 809.768041][ T30] audit: type=1326 audit(1779854794.989:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3b9b8f6c9 code=0x0 [ 810.295142][T19118] netlink: 'syz.1.5615': attribute type 4 has an invalid length. [ 813.110970][ T30] audit: type=1326 audit(1779854798.339:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.0.5652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe44cd8f6c9 code=0x0 [ 813.965091][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.971720][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.062288][T14911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 814.076716][T14911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 814.098035][T14911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 814.114620][T14911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 814.125531][T14911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 814.723427][T19218] chnl_net:caif_netlink_parms(): no params data found [ 815.048526][T19242] Invalid ELF header magic: != ELF [ 815.563156][T19218] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.593808][T19218] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.638747][T19218] bridge_slave_0: entered allmulticast mode [ 815.647319][T19218] bridge_slave_0: entered promiscuous mode [ 815.708362][T19218] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.715584][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.747868][T19218] bridge_slave_1: entered allmulticast mode [ 815.760573][T19218] bridge_slave_1: entered promiscuous mode [ 816.187738][ T5839] Bluetooth: hci0: command tx timeout [ 816.980796][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.209777][T19218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.263839][T19218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.225064][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.269290][ T5839] Bluetooth: hci0: command tx timeout [ 818.541557][T19218] team0: Port device team_slave_0 added [ 818.609817][T19218] team0: Port device team_slave_1 added [ 819.029643][T19309] overlayfs: failed to clone upperpath [ 819.487701][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.561401][T19218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.568678][T19218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.638797][T19218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.669284][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5695'. [ 819.709522][T19218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.716693][T19218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.809941][T19218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.357771][ T5839] Bluetooth: hci0: command tx timeout [ 820.379788][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.932426][T19218] hsr_slave_0: entered promiscuous mode [ 820.969217][T19218] hsr_slave_1: entered promiscuous mode [ 820.975894][T19218] debugfs: 'hsr0' already exists in 'hsr' [ 820.996892][T19218] Cannot create hsr debugfs directory [ 821.270778][T19347] overlayfs: failed to clone upperpath [ 821.366247][T19349] netlink: 'syz.3.5707': attribute type 11 has an invalid length. [ 821.868107][ T36] bridge_slave_1: left allmulticast mode [ 821.873811][ T36] bridge_slave_1: left promiscuous mode [ 821.910035][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.001414][ T36] bridge_slave_0: left allmulticast mode [ 822.011641][ T36] bridge_slave_0: left promiscuous mode [ 822.037729][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.427899][ T5839] Bluetooth: hci0: command tx timeout [ 824.143928][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.181834][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.230351][ T36] bond0 (unregistering): Released all slaves [ 825.445617][ T36] hsr_slave_0: left promiscuous mode [ 825.530059][ T36] hsr_slave_1: left promiscuous mode [ 825.558359][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.584198][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.623150][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.658177][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.741544][ T36] veth1_macvtap: left promiscuous mode [ 825.747164][ T36] veth0_macvtap: left promiscuous mode [ 825.777199][ T36] veth1_vlan: left promiscuous mode [ 825.799684][ T36] veth0_vlan: left promiscuous mode [ 827.487969][ T36] team0 (unregistering): Port device team_slave_1 removed [ 827.585403][ T36] team0 (unregistering): Port device team_slave_0 removed [ 829.050237][T19218] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 829.101240][T19218] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 829.157207][T19218] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 829.235672][T19218] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 829.458093][T19476] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 829.470043][T19476] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 829.478502][T19476] CPU: 1 UID: 0 PID: 19476 Comm: syz.1.5734 Not tainted syzkaller #0 PREEMPT(full) [ 829.487908][T19476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 829.497989][T19476] RIP: 0010:put_mnt_ns+0x34/0x2f0 [ 829.503079][T19476] Code: 55 41 54 53 48 89 fb e8 ca e7 7d ff 48 85 db 0f 84 df 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d 73 20 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 8c 95 e4 ff 4d 8b 3e 31 ff 4c [ 829.522717][T19476] RSP: 0018:ffffc9000e647960 EFLAGS: 00010203 [ 829.528838][T19476] RAX: ffffffff8243b886 RBX: fffffffffffffff4 RCX: 0000000000080000 [ 829.536847][T19476] RDX: ffffc9000c3fd000 RSI: 000000000004117a RDI: 000000000004117b [ 829.544844][T19476] RBP: fffffffffffffff4 R08: ffffffff8f7dd077 R09: 1ffffffff1efba0e [ 829.552827][T19476] R10: dffffc0000000000 R11: fffffbfff1efba0f R12: dffffc0000000000 [ 829.560806][T19476] R13: 0000000000000002 R14: 0000000000000014 R15: ffff888084ba8958 [ 829.568784][T19476] FS: 00007fb8b01886c0(0000) GS:ffff888125fc1000(0000) knlGS:0000000000000000 [ 829.577719][T19476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 829.584301][T19476] CR2: 00007fb8b0118710 CR3: 0000000066c1e000 CR4: 00000000003526f0 [ 829.592275][T19476] Call Trace: [ 829.595558][T19476] [ 829.598492][T19476] nsproxy_free+0x3c/0x7c0 [ 829.602937][T19476] create_new_namespaces+0x47a/0x540 [ 829.608227][T19476] ? copy_namespaces+0x5c/0x4b0 [ 829.613080][T19476] copy_namespaces+0x438/0x4b0 [ 829.617851][T19476] copy_process+0x168f/0x3930 [ 829.622547][T19476] ? copy_process+0x915/0x3930 [ 829.627317][T19476] ? __pfx_copy_process+0x10/0x10 [ 829.632436][T19476] ? futex_private_hash_put+0x13b/0x170 [ 829.638014][T19476] kernel_clone+0x21e/0x850 [ 829.642538][T19476] ? __seccomp_filter+0x3c6/0x1e10 [ 829.647756][T19476] ? __pfx_kernel_clone+0x10/0x10 [ 829.652798][T19476] ? do_futex+0x395/0x420 [ 829.657139][T19476] __x64_sys_clone+0x18b/0x1e0 [ 829.661906][T19476] ? __pfx___x64_sys_clone+0x10/0x10 [ 829.667200][T19476] ? __secure_computing+0xe2/0x2a0 [ 829.672324][T19476] do_syscall_64+0xfa/0xfa0 [ 829.676923][T19476] ? irqentry_exit+0x10f/0x640 [ 829.681689][T19476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.687755][T19476] ? clear_bhb_loop+0x60/0xb0 [ 829.692448][T19476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.698345][T19476] RIP: 0033:0x7fb8af38f6c9 [ 829.702780][T19476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.722509][T19476] RSP: 002b:00007fb8b0187fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 829.730935][T19476] RAX: ffffffffffffffda RBX: 00007fb8af5e5fa0 RCX: 00007fb8af38f6c9 [ 829.738920][T19476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000b21e0000 [ 829.746908][T19476] RBP: 00007fb8af411f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 829.754882][T19476] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 829.762851][T19476] R13: 00007fb8af5e6038 R14: 00007fb8af5e5fa0 R15: 00007ffcc78b6d18 [ 829.770836][T19476] [ 829.773872][T19476] Modules linked in: [ 829.778950][T19476] ---[ end trace 0000000000000000 ]--- [ 829.817889][T19476] RIP: 0010:put_mnt_ns+0x34/0x2f0 [ 829.877620][T19476] Code: 55 41 54 53 48 89 fb e8 ca e7 7d ff 48 85 db 0f 84 df 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d 73 20 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 8c 95 e4 ff 4d 8b 3e 31 ff 4c [ 829.962759][T19476] RSP: 0018:ffffc9000e647960 EFLAGS: 00010203 [ 830.019421][T19476] RAX: ffffffff8243b886 RBX: fffffffffffffff4 RCX: 0000000000080000 [ 830.087652][T19476] RDX: ffffc9000c3fd000 RSI: 000000000004117a RDI: 000000000004117b [ 830.095705][T19476] RBP: fffffffffffffff4 R08: ffffffff8f7dd077 R09: 1ffffffff1efba0e [ 830.167608][T19476] R10: dffffc0000000000 R11: fffffbfff1efba0f R12: dffffc0000000000 [ 830.175655][T19476] R13: 0000000000000002 R14: 0000000000000014 R15: ffff888084ba8958 [ 830.267613][T19476] FS: 00007fb8b01886c0(0000) GS:ffff888125fc1000(0000) knlGS:0000000000000000 [ 830.276616][T19476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.363520][T19476] CR2: 00007f12b4412000 CR3: 0000000066c1e000 CR4: 00000000003526f0 [ 830.373456][T19476] Kernel panic - not syncing: Fatal exception [ 830.379935][T19476] Kernel Offset: disabled [ 830.384262][T19476] Rebooting in 86400 seconds..