last executing test programs: 6.408420856s ago: executing program 0 (id=2010): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01"], 0x60}}, 0x240448c0) 6.292610072s ago: executing program 0 (id=2012): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, 0x0, 0x0, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(r3, 0xffffffffffffffff, 0x2) 6.096006893s ago: executing program 0 (id=2015): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x2a04c98, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@directio}], [], 0x6b}}) 5.948669988s ago: executing program 0 (id=2017): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x2a04c98, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@directio}], [], 0x6b}}) 5.686769902s ago: executing program 0 (id=2020): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r5, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01"], 0x60}}, 0x240448c0) 5.554122872s ago: executing program 0 (id=2022): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x22020600) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1c, 0x0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000014) 3.643896676s ago: executing program 1 (id=2036): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) 2.876880433s ago: executing program 2 (id=2042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 2.464974004s ago: executing program 2 (id=2043): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='W', 0x1}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x300, 0x0) 2.323381159s ago: executing program 2 (id=2044): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r5, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 2.228704682s ago: executing program 2 (id=2045): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, 0x0, 0x20000000) 2.068172761s ago: executing program 2 (id=2046): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x1) 1.986518239s ago: executing program 2 (id=2047): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c87f2e35cfcfb8c2640f196b51947b17d5785231425317285b58535073e2f78970cd385a9e47f92decc5054a2e9105ba142a7fc1ff07ae7e278b7fc86380a7819ff31427ec20958f21762d8aab227fcbdee5ed012d48ad0c0ecb44ea55a9b085", 0x61}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x14) unshare(0x62040200) 1.543838336s ago: executing program 1 (id=2052): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r5, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 632.44902ms ago: executing program 3 (id=2058): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 523.814018ms ago: executing program 3 (id=2059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 393.308449ms ago: executing program 3 (id=2060): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 392.295013ms ago: executing program 1 (id=2061): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 272.724809ms ago: executing program 3 (id=2062): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="210f27bd7000fbdbdf25010000000800010075000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) 266.633411ms ago: executing program 1 (id=2063): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="da48655b23", 0x5}, {0x0}], 0x2, &(0x7f00000006c0)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x3b, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x80, 0x4}}]}}}], 0x28}}], 0x1, 0x40088c5) 165.583249ms ago: executing program 1 (id=2064): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010029bd7000fdffffff3900000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099"], 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) 110.506582ms ago: executing program 3 (id=2065): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/252, 0xfc}], 0x1, 0x0) 92.123198ms ago: executing program 1 (id=2066): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 0s ago: executing program 3 (id=2067): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000200), 0x1, 0x4) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.235' (ED25519) to the list of known hosts. [ 82.332487][ T5811] cgroup: Unknown subsys name 'net' [ 82.507235][ T5811] cgroup: Unknown subsys name 'cpuset' [ 82.516722][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.265605][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.332503][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.351477][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.361939][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.369802][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.370901][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.377866][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.387243][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.392065][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.406661][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.406861][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.424810][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.432778][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.443446][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.445279][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.452577][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.459795][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.472604][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.475503][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.492457][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.492470][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.110742][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 92.227121][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 92.244243][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 92.255984][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 92.367423][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.374773][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.382241][ T5833] bridge_slave_0: entered allmulticast mode [ 92.390517][ T5833] bridge_slave_0: entered promiscuous mode [ 92.430992][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.438450][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.445786][ T5833] bridge_slave_1: entered allmulticast mode [ 92.453529][ T5833] bridge_slave_1: entered promiscuous mode [ 92.579382][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.587144][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.594454][ T5825] bridge_slave_0: entered allmulticast mode [ 92.601880][ T5825] bridge_slave_0: entered promiscuous mode [ 92.610083][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.617545][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.625187][ T5825] bridge_slave_1: entered allmulticast mode [ 92.632619][ T5825] bridge_slave_1: entered promiscuous mode [ 92.645154][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.667926][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.675286][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.682496][ T5826] bridge_slave_0: entered allmulticast mode [ 92.690181][ T5826] bridge_slave_0: entered promiscuous mode [ 92.713997][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.736737][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.744057][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.751263][ T5826] bridge_slave_1: entered allmulticast mode [ 92.758880][ T5826] bridge_slave_1: entered promiscuous mode [ 92.807514][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.815247][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.822453][ T5831] bridge_slave_0: entered allmulticast mode [ 92.831413][ T5831] bridge_slave_0: entered promiscuous mode [ 92.855323][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.867172][ T5833] team0: Port device team_slave_0 added [ 92.876025][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.885509][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.892701][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.900176][ T5831] bridge_slave_1: entered allmulticast mode [ 92.907631][ T5831] bridge_slave_1: entered promiscuous mode [ 92.929969][ T5833] team0: Port device team_slave_1 added [ 92.978075][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.007086][ T5825] team0: Port device team_slave_0 added [ 93.041824][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.066416][ T5825] team0: Port device team_slave_1 added [ 93.086682][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.093734][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.120263][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.135704][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.161230][ T5826] team0: Port device team_slave_0 added [ 93.167898][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.175082][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.201187][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.215748][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.240353][ T5826] team0: Port device team_slave_1 added [ 93.284439][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.291425][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.318610][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.375306][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.382307][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.408966][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.439619][ T5833] hsr_slave_0: entered promiscuous mode [ 93.446492][ T5833] hsr_slave_1: entered promiscuous mode [ 93.455715][ T5831] team0: Port device team_slave_0 added [ 93.469421][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.476557][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.494914][ T5844] Bluetooth: hci0: command tx timeout [ 93.502629][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.520908][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.528030][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.554081][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.567572][ T5831] team0: Port device team_slave_1 added [ 93.573384][ T5832] Bluetooth: hci1: command tx timeout [ 93.573402][ T5145] Bluetooth: hci2: command tx timeout [ 93.585372][ T5844] Bluetooth: hci3: command tx timeout [ 93.632018][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.639099][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.665442][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.713924][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.720907][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.747113][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.816666][ T5826] hsr_slave_0: entered promiscuous mode [ 93.823851][ T5826] hsr_slave_1: entered promiscuous mode [ 93.830215][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 93.836271][ T5826] Cannot create hsr debugfs directory [ 93.853812][ T5825] hsr_slave_0: entered promiscuous mode [ 93.860296][ T5825] hsr_slave_1: entered promiscuous mode [ 93.867653][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 93.874219][ T5825] Cannot create hsr debugfs directory [ 93.963402][ T5831] hsr_slave_0: entered promiscuous mode [ 93.970166][ T5831] hsr_slave_1: entered promiscuous mode [ 93.976678][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 93.982440][ T5831] Cannot create hsr debugfs directory [ 94.405796][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.428172][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.439575][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.459063][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.506694][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.519923][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.531184][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.543870][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.657092][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.680398][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.692466][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.704571][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.788925][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.811665][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.836003][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.848262][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.917955][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.932260][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.990967][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.031954][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.057429][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.064838][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.088525][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.095757][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.106955][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.114355][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.137385][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.151121][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.158376][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.216399][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.242584][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.249877][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.288068][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.300089][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.307367][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.355594][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.391861][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.481550][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.488944][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.503009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.510386][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.573391][ T5832] Bluetooth: hci0: command tx timeout [ 95.658395][ T5832] Bluetooth: hci1: command tx timeout [ 95.666356][ T5832] Bluetooth: hci3: command tx timeout [ 95.672499][ T5832] Bluetooth: hci2: command tx timeout [ 95.814482][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.940733][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.022498][ T5833] veth0_vlan: entered promiscuous mode [ 96.074205][ T5831] veth0_vlan: entered promiscuous mode [ 96.093819][ T5833] veth1_vlan: entered promiscuous mode [ 96.109837][ T5831] veth1_vlan: entered promiscuous mode [ 96.133324][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.149241][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.202247][ T5831] veth0_macvtap: entered promiscuous mode [ 96.226204][ T5831] veth1_macvtap: entered promiscuous mode [ 96.260904][ T5833] veth0_macvtap: entered promiscuous mode [ 96.290597][ T5825] veth0_vlan: entered promiscuous mode [ 96.299133][ T5833] veth1_macvtap: entered promiscuous mode [ 96.324137][ T5826] veth0_vlan: entered promiscuous mode [ 96.341320][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.356358][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.382998][ T5825] veth1_vlan: entered promiscuous mode [ 96.392017][ T5826] veth1_vlan: entered promiscuous mode [ 96.399476][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.411011][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.421819][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.438796][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.447718][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.481571][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.554531][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.568756][ T5825] veth0_macvtap: entered promiscuous mode [ 96.576622][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.587298][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.600814][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.619102][ T5825] veth1_macvtap: entered promiscuous mode [ 96.649119][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.660441][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.686570][ T5826] veth0_macvtap: entered promiscuous mode [ 96.707513][ T5826] veth1_macvtap: entered promiscuous mode [ 96.754078][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.779754][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.788237][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.797458][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.831224][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.851424][ T1153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.874898][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.882777][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.886011][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.904522][ T1153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.918535][ T1153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.944854][ T1153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.957460][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.981925][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.992892][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.005864][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.018724][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.040360][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.050540][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.184340][ T24] cfg80211: failed to load regulatory.db [ 97.242767][ T5907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.267155][ T5907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.361181][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.385622][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.505884][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.525623][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.571807][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.608579][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.654241][ T5832] Bluetooth: hci0: command tx timeout [ 97.734633][ T5832] Bluetooth: hci2: command tx timeout [ 97.735675][ T5145] Bluetooth: hci1: command tx timeout [ 97.740216][ T5844] Bluetooth: hci3: command tx timeout [ 98.265879][ T5934] 9p: Bad value for 'wfdno' [ 98.524705][ T5944] 9p: Bad value for 'trans' [ 99.191461][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 99.397530][ T5970] bpf: Bad value for 'gid' [ 99.734925][ T5844] Bluetooth: hci0: command tx timeout [ 99.814118][ T5844] Bluetooth: hci1: command tx timeout [ 99.819592][ T5844] Bluetooth: hci3: command tx timeout [ 99.825733][ T5832] Bluetooth: hci2: command tx timeout [ 101.437695][ T6022] overlay: Unknown parameter 'fscontext' [ 102.299980][ T6034] 9p: Bad value for 'rfdno' [ 105.184489][ T6073] overlayfs: missing 'lowerdir' [ 107.184877][ T6096] overlayfs: missing 'lowerdir' [ 109.007810][ T6124] binder: Bad value for 'max' [ 109.902419][ T6140] overlay: Unknown parameter '/' [ 113.329047][ T6182] binder: Bad value for 'max' [ 113.637907][ T6188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.820096][ T6192] 9p: Bad value for 'trans' [ 115.706754][ T6255] 9p: Bad value for 'trans' [ 117.174213][ T6304] binder: Bad value for 'max' [ 117.754329][ T6319] 9p: Bad value for 'trans' [ 119.427643][ T6368] binder: Bad value for 'max' [ 120.146064][ T6392] binder: Bad value for 'max' [ 120.160133][ T6394] 9p: Bad value for 'trans' [ 120.892629][ T6422] 9p: Bad value for 'trans' [ 121.051260][ T6427] binder: Bad value for 'max' [ 121.594063][ T6444] 9p: Bad value for 'trans' [ 121.934537][ T6454] binder: Bad value for 'max' [ 123.131156][ T6480] binder: Bad value for 'max' [ 124.134155][ T6499] 9p: Bad value for 'trans' [ 125.609588][ T6528] 9p: Bad value for 'trans' [ 128.265400][ T6574] binder: Bad value for 'max' [ 130.760617][ T6593] binder: Bad value for 'max' [ 131.582381][ T6609] 9p: Bad value for 'trans' [ 132.438032][ T6633] 9p: Bad value for 'trans' [ 133.459546][ T6654] 9p: Bad value for 'trans' [ 134.217917][ T6674] 9p: Bad value for 'trans' [ 138.142278][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.150871][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.171274][ T6729] 9p: Bad value for 'trans' [ 139.159944][ T6751] 9p: Bad value for 'trans' [ 139.985312][ T6777] binder: Bad value for 'max' [ 143.675771][ T6851] binder: Bad value for 'max' [ 145.462042][ T6921] binder: Bad value for 'max' [ 152.674442][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 154.104324][ T7093] binder: Bad value for 'max' [ 167.927689][ T7314] binder: Bad value for 'max' [ 168.574650][ T7322] 9p: Bad value for 'trans' [ 169.362051][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.696'. [ 174.626687][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.742'. [ 175.549634][ T7456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.754'. [ 189.454193][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.818'. [ 190.318629][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.829'. [ 197.684348][ T7768] binder: Bad value for 'max' [ 199.583870][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.590406][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.614335][ T7905] binder: Bad value for 'max' [ 209.623068][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.981'. [ 217.013449][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 217.019889][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 217.026161][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 217.036364][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 221.048713][ T8039] binder: Bad value for 'max' [ 225.050508][ T8090] binder: Bad value for 'max' [ 233.069209][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 233.488748][ T8189] binder: Bad value for 'max' [ 236.520429][ T8217] binder: Bad value for 'max' [ 239.411162][ T8247] binder: Bad value for 'max' [ 241.477785][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 243.215099][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1170'. [ 250.706248][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1251'. [ 251.714612][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1260'. [ 253.002336][ T8504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'. [ 258.945472][ T8663] binder: Bad value for 'max' [ 259.895223][ T8689] binder: Bad value for 'max' [ 261.024693][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.031786][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.650947][ T8811] binder: Bad value for 'max' [ 269.462153][ T8833] binder: Bad value for 'max' [ 281.900498][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1490'. [ 282.690047][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1499'. [ 283.296615][ T8980] netlink: 836 bytes leftover after parsing attributes in process `syz.2.1504'. [ 288.744917][ T9150] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 305.457912][ T9392] binder: Unknown parameter 'ma' [ 306.391077][ T9416] binder: Unknown parameter 'ma' [ 307.210539][ T9438] binder: Unknown parameter 'ma' [ 310.217923][ T9465] binder: Bad value for 'max' [ 312.087002][ T9485] binder: Bad value for 'max' [ 315.727011][ T9573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1790'. [ 321.119062][ T9685] overlayfs: missing 'lowerdir' [ 322.458994][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.467734][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.065372][ T9803] 9p: Bad value for 'wfdno' [ 330.713616][ T978] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 330.888411][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.899000][ T978] usb 3-1: config 7 has an invalid interface number: 205 but max is 0 [ 330.908032][ T978] usb 3-1: config 7 has no interface number 0 [ 330.921178][ T978] usb 3-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice=29.5d [ 330.932236][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.952504][ T978] usb 3-1: Product: syz [ 330.958140][ T978] usb 3-1: Manufacturer: syz [ 330.973139][ T978] usb 3-1: SerialNumber: syz [ 331.245751][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.320667][ T978] snd-usb-audio 3-1:7.205: probe with driver snd-usb-audio failed with error -2 [ 331.364890][ T978] usb 3-1: USB disconnect, device number 2 [ 331.409334][ T9814] udevd[9814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.205/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.535122][ T9818] 9p: Bad value for 'wfdno' [ 332.405669][ T9844] 9p: Bad value for 'wfdno' [ 332.406872][ T9841] 9p: Bad value for 'wfdno' [ 332.997960][ T9864] 9p: Bad value for 'rfdno' [ 333.127497][ T9870] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1935'. [ 333.938005][ T9898] 9p: Bad value for 'wfdno' [ 334.884898][ T9922] 9p: Bad value for 'rfdno' [ 338.044283][T10007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2002'. [ 339.048685][T10025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2011'. [ 340.236785][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.247132][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.256425][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.265436][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.273854][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.817759][T10059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2023'. [ 341.088011][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.172147][T10049] chnl_net:caif_netlink_parms(): no params data found [ 341.246113][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.529336][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.859955][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.902854][T10049] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.910890][T10049] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.930475][T10049] bridge_slave_0: entered allmulticast mode [ 341.947793][T10049] bridge_slave_0: entered promiscuous mode [ 341.980432][T10049] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.993389][T10049] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.008605][T10049] bridge_slave_1: entered allmulticast mode [ 342.037619][T10049] bridge_slave_1: entered promiscuous mode [ 342.161750][T10049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.196148][T10049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.374376][ T5145] Bluetooth: hci4: command tx timeout [ 342.387684][T10049] team0: Port device team_slave_0 added [ 342.397032][T10049] team0: Port device team_slave_1 added [ 342.598622][T10049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.613721][T10049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.673294][T10049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.726495][T10049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.743233][T10049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.833162][T10049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.882144][ T79] bridge_slave_1: left allmulticast mode [ 342.888323][ T79] bridge_slave_1: left promiscuous mode [ 342.906317][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.940167][ T79] bridge_slave_0: left allmulticast mode [ 342.953318][ T79] bridge_slave_0: left promiscuous mode [ 342.965643][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.634067][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.657862][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.677889][ T79] bond0 (unregistering): Released all slaves [ 343.788285][T10115] 9p: Bad value for 'wfdno' [ 343.989680][T10049] hsr_slave_0: entered promiscuous mode [ 344.007173][T10049] hsr_slave_1: entered promiscuous mode [ 344.024176][T10049] debugfs: 'hsr0' already exists in 'hsr' [ 344.029974][T10049] Cannot create hsr debugfs directory [ 344.453396][ T5145] Bluetooth: hci4: command tx timeout [ 344.565222][ T79] hsr_slave_0: left promiscuous mode [ 344.584677][ T79] hsr_slave_1: left promiscuous mode [ 344.592178][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.612815][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.634602][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.642592][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.701137][ T79] veth1_macvtap: left promiscuous mode [ 344.724291][ T79] veth0_macvtap: left promiscuous mode [ 344.730129][ T79] veth1_vlan: left promiscuous mode [ 344.741000][ T79] veth0_vlan: left promiscuous mode [ 345.632557][ T79] team0 (unregistering): Port device team_slave_1 removed [ 345.704892][ T79] team0 (unregistering): Port device team_slave_0 removed [ 346.534439][ T5145] Bluetooth: hci4: command tx timeout [ 346.557893][T10107] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 346.564227][T10107] CPU: 0 UID: 0 PID: 10107 Comm: syz.2.2047 Not tainted syzkaller #0 PREEMPT(full) [ 346.573628][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.583717][T10107] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 346.589060][T10107] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 346.608791][T10107] RSP: 0018:ffffc9000dd27d08 EFLAGS: 00010207 [ 346.614911][T10107] RAX: 1ffff11004f6df64 RBX: ffff888027b6faf8 RCX: 0000000000000000 [ 346.622920][T10107] RDX: 0000000000000000 RSI: ffffffff8da8b2a1 RDI: 00000000ffffffff [ 346.631117][T10107] RBP: 000000000000002e R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 346.639125][T10107] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: 000000000000003e [ 346.647144][T10107] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 346.655154][T10107] FS: 00007f383d7bc6c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 346.664205][T10107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.671008][T10107] CR2: 000055557153a5c8 CR3: 000000002f8e8000 CR4: 00000000003526f0 [ 346.679018][T10107] Call Trace: [ 346.682347][T10107] [ 346.685296][T10107] create_new_namespaces+0x47a/0x540 [ 346.690621][T10107] unshare_nsproxy_namespaces+0x11c/0x170 [ 346.696349][T10107] ksys_unshare+0x4c8/0x8c0 [ 346.700873][T10107] ? __pfx_ksys_unshare+0x10/0x10 [ 346.705920][T10107] __x64_sys_unshare+0x38/0x50 [ 346.710694][T10107] do_syscall_64+0xfa/0xfa0 [ 346.715255][T10107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.721340][T10107] ? clear_bhb_loop+0x60/0xb0 [ 346.726069][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.731971][T10107] RIP: 0033:0x7f383c98f6c9 [ 346.736410][T10107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.756204][T10107] RSP: 002b:00007f383d7bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 346.764640][T10107] RAX: ffffffffffffffda RBX: 00007f383cbe5fa0 RCX: 00007f383c98f6c9 [ 346.772754][T10107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 346.780757][T10107] RBP: 00007f383ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.788747][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.796736][T10107] R13: 00007f383cbe6038 R14: 00007f383cbe5fa0 R15: 00007ffdc0b9abf8 [ 346.804731][T10107] [ 346.807770][T10107] Modules linked in: [ 346.812718][T10107] ---[ end trace 0000000000000000 ]--- [ 346.969686][T10107] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 347.047537][T10107] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 347.088714][T10107] RSP: 0018:ffffc9000dd27d08 EFLAGS: 00010207 [ 347.096383][T10107] RAX: 1ffff11004f6df64 RBX: ffff888027b6faf8 RCX: 0000000000000000 [ 347.141956][T10107] RDX: 0000000000000000 RSI: ffffffff8da8b2a1 RDI: 00000000ffffffff [ 347.203416][T10107] RBP: 000000000000002e R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 347.211627][T10107] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: 000000000000003e [ 347.253556][T10107] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 347.261601][T10107] FS: 00007f383d7bc6c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 347.273756][T10107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.280444][T10107] CR2: 00007f8a02b8e368 CR3: 000000002f8e8000 CR4: 00000000003526f0 [ 347.323200][T10107] Kernel panic - not syncing: Fatal exception [ 347.329653][T10107] Kernel Offset: disabled [ 347.333983][T10107] Rebooting in 86400 seconds..