last executing test programs: 13.061690907s ago: executing program 1 (id=2408): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x0, 0x4000}, 0x0) syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) 12.138841806s ago: executing program 1 (id=2410): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 10.129750245s ago: executing program 1 (id=2425): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500), 0x0, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 8.849551227s ago: executing program 1 (id=2435): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 8.589526076s ago: executing program 1 (id=2438): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) write(r5, 0x0, 0x0) 8.444740659s ago: executing program 1 (id=2439): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 6.729836294s ago: executing program 2 (id=2455): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) 4.795999422s ago: executing program 2 (id=2462): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1, 0x2, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@lsrr={0x83, 0x3, 0x8e}]}}}}}) 3.289751641s ago: executing program 2 (id=2482): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88fd537e5d114b6d, 0x11, r5, 0x0) 3.132312294s ago: executing program 2 (id=2485): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0), 0x0, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.006132651s ago: executing program 3 (id=2487): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) 2.888018687s ago: executing program 3 (id=2489): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1, 0x2, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@lsrr={0x83, 0x3, 0x8e}]}}}}}) 2.878495491s ago: executing program 2 (id=2490): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) 2.824765066s ago: executing program 0 (id=2491): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210f27bd7000fbdbdf25010000000800010075000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) 2.695664238s ago: executing program 2 (id=2492): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) unshare(0x62020680) 2.688988523s ago: executing program 3 (id=2493): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='W', 0x1}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r4, 0x0, r5) 2.638180185s ago: executing program 0 (id=2494): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 2.516089384s ago: executing program 0 (id=2495): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r1, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x1) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10000, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x989d, 0x800000000000009, 0x0, 0x14, 0x10000, 0x10000, 0x6, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3fc, 0x80000000, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x7ff, 0x2, 0x6, 0xc, 0x96, 0xffffffff, 0x8, 0x20, 0x5, 0x6, 0x4, 0x2, 0x200000000000009, 0x5e36, 0x0, 0x295, 0x46, 0x6, 0x3, 0xa3de, 0x20000000002, 0xa, 0x1007, 0x3ff, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe8, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xffffffff00000000, 0xfffffffffffffff7, 0x401, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x4, 0x7, 0x2, 0xcdc, 0x4000000003, 0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xfff, 0xa, 0x4, 0x1, 0xab6, 0x9, 0x8, 0x0, 0x27, 0x9, 0xff, 0x6, 0xf5, 0x8, 0x8061d, 0x3, 0x468, 0xf6, 0x4, 0x10000000000008, 0x200, 0x7, 0x80000001, 0x2, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0x8, 0x2, 0x4, 0xfffffffffffffffa, 0x2, 0x7, 0xdfd4, 0x200, 0x11, 0x5, 0x8, 0x1, 0x53e0f0fe, 0x2, 0x0, 0xfffffffffffffffe, 0xa692, 0xca, 0x7f, 0x10000]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.438748919s ago: executing program 3 (id=2496): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) 2.366699483s ago: executing program 0 (id=2497): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x2004004, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.219522493s ago: executing program 0 (id=2498): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fstat(r3, &(0x7f00000001c0)) 2.219155349s ago: executing program 3 (id=2499): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x0, 0x4000}, 0x0) syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) 117.715518ms ago: executing program 3 (id=2500): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) 0s ago: executing program 0 (id=2501): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210f27bd7000fbdbdf25010000000800010075000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.200' (ED25519) to the list of known hosts. [ 65.008482][ T5811] cgroup: Unknown subsys name 'net' [ 65.198503][ T5811] cgroup: Unknown subsys name 'cpuset' [ 65.208979][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.688666][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.315091][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.323802][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.333995][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.341739][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.342860][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.349901][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.365339][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.368103][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.373555][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.381104][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.386703][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.396234][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.403177][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.408438][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.416396][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.421814][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.437521][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.439253][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.461524][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.471300][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.994195][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 71.114965][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 71.146523][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 71.199925][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 71.280168][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.287773][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.296067][ T5823] bridge_slave_0: entered allmulticast mode [ 71.303157][ T5823] bridge_slave_0: entered promiscuous mode [ 71.348444][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.355635][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.362770][ T5823] bridge_slave_1: entered allmulticast mode [ 71.374443][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.378222][ T5823] bridge_slave_1: entered promiscuous mode [ 71.386709][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.463926][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.471214][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.478752][ T5821] bridge_slave_0: entered allmulticast mode [ 71.485850][ T5821] bridge_slave_0: entered promiscuous mode [ 71.520169][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.532643][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.542136][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.550423][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.558087][ T5821] bridge_slave_1: entered allmulticast mode [ 71.565438][ T5821] bridge_slave_1: entered promiscuous mode [ 71.572380][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.579533][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.586824][ T5822] bridge_slave_0: entered allmulticast mode [ 71.593820][ T5822] bridge_slave_0: entered promiscuous mode [ 71.650089][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.657322][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.664457][ T5822] bridge_slave_1: entered allmulticast mode [ 71.672296][ T5822] bridge_slave_1: entered promiscuous mode [ 71.679464][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.686786][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.693953][ T5820] bridge_slave_0: entered allmulticast mode [ 71.701796][ T5820] bridge_slave_0: entered promiscuous mode [ 71.722691][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.743427][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.750764][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.758208][ T5820] bridge_slave_1: entered allmulticast mode [ 71.765977][ T5820] bridge_slave_1: entered promiscuous mode [ 71.775302][ T5823] team0: Port device team_slave_0 added [ 71.783196][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.819090][ T5823] team0: Port device team_slave_1 added [ 71.840002][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.895452][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.909434][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.931852][ T5821] team0: Port device team_slave_0 added [ 71.952569][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.963149][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.970291][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.997110][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.010712][ T5821] team0: Port device team_slave_1 added [ 72.039588][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.046638][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.072698][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.097679][ T5822] team0: Port device team_slave_0 added [ 72.139067][ T5822] team0: Port device team_slave_1 added [ 72.145838][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.152795][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.178864][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.192089][ T5820] team0: Port device team_slave_0 added [ 72.201225][ T5820] team0: Port device team_slave_1 added [ 72.219257][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.226647][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.253089][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.303095][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.310088][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.336006][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.365368][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.372344][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.398385][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.411154][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.418601][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.444733][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.480921][ T5823] hsr_slave_0: entered promiscuous mode [ 72.486748][ T5831] Bluetooth: hci2: command tx timeout [ 72.488135][ T5823] hsr_slave_1: entered promiscuous mode [ 72.492527][ T5831] Bluetooth: hci0: command tx timeout [ 72.501449][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.510610][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.536952][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.564751][ T5831] Bluetooth: hci1: command tx timeout [ 72.574907][ T5831] Bluetooth: hci3: command tx timeout [ 72.627417][ T5821] hsr_slave_0: entered promiscuous mode [ 72.633788][ T5821] hsr_slave_1: entered promiscuous mode [ 72.640157][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 72.646657][ T5821] Cannot create hsr debugfs directory [ 72.681335][ T5822] hsr_slave_0: entered promiscuous mode [ 72.688347][ T5822] hsr_slave_1: entered promiscuous mode [ 72.694781][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 72.700647][ T5822] Cannot create hsr debugfs directory [ 72.713006][ T5820] hsr_slave_0: entered promiscuous mode [ 72.719443][ T5820] hsr_slave_1: entered promiscuous mode [ 72.725876][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 72.731632][ T5820] Cannot create hsr debugfs directory [ 73.181110][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.195792][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.207605][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.228945][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.286248][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.307010][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.329244][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.339338][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.419427][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.433867][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.460884][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.472168][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.573743][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.592614][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.609891][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.627534][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.653344][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.692992][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.703410][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.742990][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.750304][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.771310][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.778605][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.820777][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.874211][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.881393][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.892434][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.899573][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.951134][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.039783][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.080900][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.088161][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.117713][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.138859][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.146089][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.228149][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.251086][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.288725][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.295971][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.320582][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.327814][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.472570][ T5823] veth0_vlan: entered promiscuous mode [ 74.504569][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.541122][ T5823] veth1_vlan: entered promiscuous mode [ 74.567308][ T52] Bluetooth: hci2: command tx timeout [ 74.572819][ T5831] Bluetooth: hci0: command tx timeout [ 74.647288][ T5831] Bluetooth: hci3: command tx timeout [ 74.652742][ T5831] Bluetooth: hci1: command tx timeout [ 74.662123][ T5822] veth0_vlan: entered promiscuous mode [ 74.677892][ T5823] veth0_macvtap: entered promiscuous mode [ 74.702146][ T5823] veth1_macvtap: entered promiscuous mode [ 74.728147][ T5822] veth1_vlan: entered promiscuous mode [ 74.765952][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.777232][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.842931][ T5822] veth0_macvtap: entered promiscuous mode [ 74.858315][ T5822] veth1_macvtap: entered promiscuous mode [ 74.872939][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.891398][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.922313][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.947586][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.956618][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.979163][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.986497][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.011074][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.062274][ T1331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.071305][ T1331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.101916][ T1331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.112487][ T1331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.122443][ T5821] veth0_vlan: entered promiscuous mode [ 75.164002][ T5821] veth1_vlan: entered promiscuous mode [ 75.172874][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.185264][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.233000][ T5820] veth0_vlan: entered promiscuous mode [ 75.251619][ T5821] veth0_macvtap: entered promiscuous mode [ 75.264343][ T5820] veth1_vlan: entered promiscuous mode [ 75.265143][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.279712][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.304030][ T5821] veth1_macvtap: entered promiscuous mode [ 75.379270][ T5820] veth0_macvtap: entered promiscuous mode [ 75.396490][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.400684][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.420125][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.438298][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.445067][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.456197][ T5820] veth1_macvtap: entered promiscuous mode [ 75.498787][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.508662][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.518336][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.531755][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.585721][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.601934][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.631899][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.686732][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.770925][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.783578][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.832296][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.841722][ T5916] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 75.845338][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.877486][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.903569][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.025195][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.054023][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.205583][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.228038][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.427433][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.455046][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.472544][ T5934] 9p: Could not find request transport: 0xffffffffffffffff [ 76.645954][ T52] Bluetooth: hci2: command tx timeout [ 76.651999][ T5831] Bluetooth: hci0: command tx timeout [ 76.725209][ T5831] Bluetooth: hci1: command tx timeout [ 76.730658][ T5831] Bluetooth: hci3: command tx timeout [ 78.725836][ T52] Bluetooth: hci0: command tx timeout [ 78.727642][ T5831] Bluetooth: hci2: command tx timeout [ 78.806442][ T5831] Bluetooth: hci3: command tx timeout [ 78.812021][ T5831] Bluetooth: hci1: command tx timeout [ 79.649040][ T5991] netlink: 'syz.1.38': attribute type 4 has an invalid length. [ 81.368222][ T6018] process 'syz.0.43' launched './file1' with NULL argv: empty string added [ 81.915248][ T6026] 9p: Could not find request transport: 0xffffffffffffffff [ 83.949576][ T6064] netlink: 'syz.2.71': attribute type 4 has an invalid length. [ 86.746324][ T11] cfg80211: failed to load regulatory.db [ 88.020176][ T6152] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 89.303259][ T6168] 9p: Could not find request transport: 0xffffffffffffffff [ 92.341079][ T6202] 9p: Could not find request transport: 0xffffffffffffffff [ 94.596979][ T6233] netlink: 'syz.0.153': attribute type 4 has an invalid length. [ 96.029934][ T6254] netlink: 'syz.1.163': attribute type 4 has an invalid length. [ 97.241105][ T6283] netlink: 'syz.1.174': attribute type 4 has an invalid length. [ 99.865945][ T6319] netlink: 'syz.3.188': attribute type 4 has an invalid length. [ 100.431896][ T6326] 9p: Could not find request transport: 0xffffffffffffffff [ 102.518482][ T6351] 9p: Could not find request transport: 0xffffffffffffffff [ 107.451530][ T6415] 9p: Could not find request transport: 0xffffffffffffffff [ 111.132189][ T6458] 9p: Could not find request transport: 0xffffffffffffffff [ 115.323617][ T6484] 9p: Could not find request transport: 0xffffffffffffffff [ 119.879060][ T6535] 9p: Could not find request transport: 0xffffffffffffffff [ 122.695577][ T6613] netlink: 'syz.1.323': attribute type 4 has an invalid length. [ 124.736004][ T6633] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 127.537078][ T6665] netlink: 'syz.3.345': attribute type 4 has an invalid length. [ 129.966537][ T6686] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 132.815201][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821556][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.217614][ T6713] netlink: 'syz.2.370': attribute type 4 has an invalid length. [ 135.389364][ T6741] 9p: Could not find request transport: 0xffffffffffffffff [ 136.818437][ T6770] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 137.824485][ T6790] 9p: Could not find request transport: 0xffffffffffffffff [ 139.002886][ T6814] netlink: 'syz.3.418': attribute type 4 has an invalid length. [ 140.845364][ T6834] netlink: 'syz.2.428': attribute type 4 has an invalid length. [ 142.065481][ T6858] netlink: 'syz.1.440': attribute type 4 has an invalid length. [ 142.335969][ T6866] 9p: Could not find request transport: 0xffffffffffffffff [ 143.218210][ T6889] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 143.523701][ T6895] 9p: Could not find request transport: 0xffffffffffffffff [ 144.629721][ T6917] netlink: 'syz.2.465': attribute type 4 has an invalid length. [ 145.792668][ T6943] netlink: 'syz.2.477': attribute type 4 has an invalid length. [ 147.184761][ T6965] 9p: Could not find request transport: 0xffffffffffffffff [ 149.173191][ T7006] 9p: Could not find request transport: 0xffffffffffffffff [ 149.545269][ T7013] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 151.232720][ T7054] 9p: Could not find request transport: 0xffffffffffffffff [ 152.701839][ T7079] 9p: Could not find request transport: 0xffffffffffffffff [ 165.048353][ T7231] 9p: Could not find request transport: 0xffffffffffffffff [ 166.498606][ T7262] overlayfs: failed to resolve './file1': -2 [ 166.925826][ T7269] 9p: Could not find request transport: 0xffffffffffffffff [ 169.093046][ T7307] overlayfs: failed to resolve './file1': -2 [ 170.360302][ T7324] 9p: Could not find request transport: 0xffffffffffffffff [ 172.389209][ T7383] 9p: Could not find request transport: 0xffffffffffffffff [ 175.198587][ T7479] 9p: Could not find request transport: 0xffffffffffffffff [ 175.997414][ T7502] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 181.734080][ T7601] 9p: Could not find request transport: 0xffffffffffffffff [ 184.238406][ T7655] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 186.078648][ T7676] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 189.747224][ T7725] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 192.078611][ T7786] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 194.276169][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.282525][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.995902][ T7821] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 195.913591][ T7845] 9p: Could not find request transport: 0xffffffffffffffff [ 196.325448][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 196.331639][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 196.339145][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 196.345808][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 206.500487][ T8065] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 212.317580][ T8133] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 213.635198][ T8151] overlay: Unknown parameter 'fscontext' [ 216.886386][ T8202] 9p: Bad value for 'trans' [ 217.555842][ T8218] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 218.211531][ T8234] syz.3.1089 (8234) used greatest stack depth: 17864 bytes left [ 219.355432][ T8261] overlay: Unknown parameter 'fscontext' [ 230.180713][ T8440] overlay: Unknown parameter 'fscontext' [ 235.580775][ T8518] overlay: Unknown parameter 'fscontext' [ 235.612694][ T8520] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 237.968240][ T8568] overlay: Unknown parameter 'fscontext' [ 244.013165][ T8641] overlay: Unknown parameter 'fscontext' [ 251.189731][ T8731] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 255.692151][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698692][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.867351][ T8840] overlay: Unknown parameter 'fscontext' [ 262.765576][ T8887] overlay: Unknown parameter 'fscontext' [ 263.500836][ T8903] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 265.661546][ T8927] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 267.511422][ T8953] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 269.533525][ T8977] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 270.369845][ T9001] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 270.994299][ T9026] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 271.833399][ T9052] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 276.544702][ T9150] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 277.448621][ T9173] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 278.554987][ T9195] overlay: Unknown parameter '/' [ 281.011418][ T9219] overlay: Unknown parameter '/' [ 281.813186][ T9235] overlay: Unknown parameter '/' [ 289.101162][ T9356] overlay: Unknown parameter 'fscontext' [ 289.248937][ T9358] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 295.730612][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 297.043208][ T9492] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 300.079635][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 301.862192][ T9573] overlay: Unknown parameter 'fscontext' [ 302.065576][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 303.671523][ T9621] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 304.673131][ T9642] overlay: Unknown parameter 'fscontext' [ 313.421161][ T9780] overlay: Unknown parameter 'fscontext' [ 314.241121][ T9805] overlay: Unknown parameter 'fscontext' [ 314.260854][ T9807] overlay: Unknown parameter 'fscontext' [ 314.821285][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 316.033849][ T9858] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 317.136489][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.142846][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.618518][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1905'. [ 320.609563][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1941'. [ 321.288675][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'. [ 322.163399][T10035] overlay: Unknown parameter 'fscontext' [ 322.446408][T10045] 9p: Bad value for 'rfdno' [ 322.713820][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 322.890994][T10060] overlay: Unknown parameter 'fscontext' [ 323.098963][T10068] 9p: Bad value for 'rfdno' [ 323.452591][T10084] overlay: Unknown parameter 'fscontext' [ 324.703478][T10138] overlay: Unknown parameter 'fscontext' [ 325.298088][T10165] overlay: Unknown parameter 'fscontext' [ 328.291481][T10235] overlay: Unknown parameter 'fscontext' [ 330.476454][T10269] overlayfs: missing 'lowerdir' [ 331.437565][T10286] overlayfs: missing 'lowerdir' [ 340.999193][T10452] overlayfs: missing 'lowerdir' [ 347.440315][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 348.032839][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.043776][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.056066][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.065066][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.072943][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.189586][T10626] overlay: Unknown parameter 'fscontext' [ 349.171323][ T1307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.216866][T10621] chnl_net:caif_netlink_parms(): no params data found [ 349.698986][ T1307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.007223][ T1307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.047056][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.054269][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.090143][T10621] bridge_slave_0: entered allmulticast mode [ 350.106593][T10621] bridge_slave_0: entered promiscuous mode [ 350.138959][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.146474][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.153731][T10621] bridge_slave_1: entered allmulticast mode [ 350.172176][ T5838] Bluetooth: hci4: command tx timeout [ 350.193907][T10621] bridge_slave_1: entered promiscuous mode [ 350.257382][ T1307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.280375][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.298259][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.399070][T10621] team0: Port device team_slave_0 added [ 350.483105][T10621] team0: Port device team_slave_1 added [ 350.618600][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.635452][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.684777][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.712732][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.734923][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.779186][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.846252][ T1307] bridge_slave_1: left allmulticast mode [ 350.853406][ T1307] bridge_slave_1: left promiscuous mode [ 350.866220][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.923827][ T1307] bridge_slave_0: left allmulticast mode [ 350.935530][ T1307] bridge_slave_0: left promiscuous mode [ 350.942235][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.945319][ T1307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.968285][ T1307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.986674][ T1307] bond0 (unregistering): Released all slaves [ 352.244782][ T5838] Bluetooth: hci4: command tx timeout [ 352.281223][T10621] hsr_slave_0: entered promiscuous mode [ 352.315331][T10621] hsr_slave_1: entered promiscuous mode [ 352.340751][T10621] debugfs: 'hsr0' already exists in 'hsr' [ 352.369894][T10621] Cannot create hsr debugfs directory [ 352.650557][ T1307] hsr_slave_0: left promiscuous mode [ 352.664318][ T1307] hsr_slave_1: left promiscuous mode [ 352.676343][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.692010][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.703003][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.724886][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.771446][ T1307] veth1_macvtap: left promiscuous mode [ 352.794877][ T1307] veth0_macvtap: left promiscuous mode [ 352.805426][ T1307] veth1_vlan: left promiscuous mode [ 352.815160][ T1307] veth0_vlan: left promiscuous mode [ 353.991703][ T1307] team0 (unregistering): Port device team_slave_1 removed [ 354.075923][ T1307] team0 (unregistering): Port device team_slave_0 removed [ 354.324778][ T5838] Bluetooth: hci4: command tx timeout [ 355.037213][T10739] loop5: detected capacity change from 0 to 7 [ 355.490562][T10739] Dev loop5: unable to read RDB block 7 [ 355.498171][T10748] overlay: Unknown parameter 'fscontext' [ 355.512717][T10739] loop5: unable to read partition table [ 355.539419][T10739] loop5: partition table beyond EOD, truncated [ 355.572040][T10739] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 356.093090][T10621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.132040][T10621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.157636][T10621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.188793][T10621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.404827][ T5838] Bluetooth: hci4: command tx timeout [ 356.459273][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.541533][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.608438][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.615669][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.656248][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.663503][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.319521][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.469973][T10621] veth0_vlan: entered promiscuous mode [ 357.502713][T10621] veth1_vlan: entered promiscuous mode [ 357.653483][T10621] veth0_macvtap: entered promiscuous mode [ 357.687774][T10621] veth1_macvtap: entered promiscuous mode [ 357.740336][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.779481][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.823531][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.866322][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.909163][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.919387][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.153445][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.162157][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.264801][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.281834][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.155325][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.164332][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.173397][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.184396][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.203794][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.614083][T11004] 9p: Bad value for 'rfdno' [ 366.674526][T11007] overlay: Unknown parameter 'fscontext' [ 366.899961][T10992] chnl_net:caif_netlink_parms(): no params data found [ 367.052042][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 367.243962][T10992] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.274809][T10992] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.282199][T10992] bridge_slave_0: entered allmulticast mode [ 367.299958][T10992] bridge_slave_0: entered promiscuous mode [ 367.325164][T10992] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.343629][T10992] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.363215][T10992] bridge_slave_1: entered allmulticast mode [ 367.383810][T10992] bridge_slave_1: entered promiscuous mode [ 367.506596][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.559545][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.747465][T10992] team0: Port device team_slave_0 added [ 367.770040][T10992] team0: Port device team_slave_1 added [ 368.106541][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.113533][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.223387][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.257345][ T5838] Bluetooth: hci3: command tx timeout [ 368.274562][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.292850][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.319185][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.556741][T10992] hsr_slave_0: entered promiscuous mode [ 368.563663][T10992] hsr_slave_1: entered promiscuous mode [ 368.694021][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.810497][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.916461][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.066607][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.449943][ T12] bridge_slave_1: left allmulticast mode [ 369.476950][ T12] bridge_slave_1: left promiscuous mode [ 369.482792][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.557854][ T12] bridge_slave_0: left allmulticast mode [ 369.563552][ T12] bridge_slave_0: left promiscuous mode [ 369.585971][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.325078][ T5838] Bluetooth: hci3: command tx timeout [ 370.610616][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.632378][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.657183][ T12] bond0 (unregistering): Released all slaves [ 371.421183][ T12] hsr_slave_0: left promiscuous mode [ 371.434668][ T12] hsr_slave_1: left promiscuous mode [ 371.451778][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.466881][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.495749][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.504410][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.561471][ T12] veth1_macvtap: left promiscuous mode [ 371.574358][ T12] veth0_macvtap: left promiscuous mode [ 371.587543][ T12] veth1_vlan: left promiscuous mode [ 371.600355][ T12] veth0_vlan: left promiscuous mode [ 372.419574][ T5838] Bluetooth: hci3: command tx timeout [ 372.535451][ T12] team0 (unregistering): Port device team_slave_1 removed [ 372.648063][ T12] team0 (unregistering): Port device team_slave_0 removed [ 373.642270][T10992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.676189][T10992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.730640][T10992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.762105][T10992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.076496][T10992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.143140][T10992] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.169834][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.177095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.241889][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.249181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.487827][ T5838] Bluetooth: hci3: command tx timeout [ 374.776832][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.916821][T10992] veth0_vlan: entered promiscuous mode [ 374.968751][T10992] veth1_vlan: entered promiscuous mode [ 375.061797][T10992] veth0_macvtap: entered promiscuous mode [ 375.101034][T10992] veth1_macvtap: entered promiscuous mode [ 375.173399][T10992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.214493][T10992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.251078][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.270324][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.297272][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.326244][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.656079][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.688951][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.832578][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.855398][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.528005][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.538096][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.558881][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.576484][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.588558][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.373261][T11209] chnl_net:caif_netlink_parms(): no params data found [ 377.917589][ T134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.396098][ T134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.468953][T11209] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.495981][T11209] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.503416][T11209] bridge_slave_0: entered allmulticast mode [ 378.530038][T11209] bridge_slave_0: entered promiscuous mode [ 378.548252][T11209] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.570057][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.576800][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.597086][T11209] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.604436][T11209] bridge_slave_1: entered allmulticast mode [ 378.632964][T11209] bridge_slave_1: entered promiscuous mode [ 378.646509][ T5838] Bluetooth: hci0: command tx timeout [ 378.760674][ T134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.932834][ T134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.979083][T11209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.011283][T11209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.137717][T11209] team0: Port device team_slave_0 added [ 379.169193][T11209] team0: Port device team_slave_1 added [ 379.428066][T11209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.455378][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.516672][T11209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.557218][T11209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.564543][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.601440][T11209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.919892][T11209] hsr_slave_0: entered promiscuous mode [ 379.935735][T11209] hsr_slave_1: entered promiscuous mode [ 379.945201][T11209] debugfs: 'hsr0' already exists in 'hsr' [ 379.952281][T11209] Cannot create hsr debugfs directory [ 380.023239][ T134] bridge_slave_1: left allmulticast mode [ 380.029594][ T134] bridge_slave_1: left promiscuous mode [ 380.045162][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.066521][ T134] bridge_slave_0: left allmulticast mode [ 380.072205][ T134] bridge_slave_0: left promiscuous mode [ 380.100651][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.724701][ T5838] Bluetooth: hci0: command tx timeout [ 380.935397][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.961712][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.979490][ T134] bond0 (unregistering): Released all slaves [ 381.220835][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'. [ 381.833436][ T134] hsr_slave_0: left promiscuous mode [ 381.858838][ T134] hsr_slave_1: left promiscuous mode [ 381.867747][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.888186][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.913911][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.934663][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.991741][ T134] veth1_macvtap: left promiscuous mode [ 382.014919][ T134] veth0_macvtap: left promiscuous mode [ 382.020680][ T134] veth1_vlan: left promiscuous mode [ 382.038574][ T134] veth0_vlan: left promiscuous mode [ 382.805867][ T5838] Bluetooth: hci0: command tx timeout [ 383.474336][ T134] team0 (unregistering): Port device team_slave_1 removed [ 383.574063][ T134] team0 (unregistering): Port device team_slave_0 removed [ 384.895113][ T5838] Bluetooth: hci0: command tx timeout [ 384.938964][T11315] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 384.945200][T11315] CPU: 1 UID: 0 PID: 11315 Comm: syz.2.2492 Not tainted syzkaller #0 PREEMPT(full) [ 384.954574][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.964616][T11315] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 384.969911][T11315] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 384.989528][T11315] RSP: 0018:ffffc900053c7d08 EFLAGS: 00010207 [ 384.995581][T11315] RAX: 1ffff11003a54460 RBX: ffff88801d2a22d8 RCX: 0000000000000000 [ 385.003541][T11315] RDX: 0000000000000000 RSI: ffffffff8da8b2a1 RDI: 00000000ffffffff [ 385.011591][T11315] RBP: 000000000000002e R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 385.019555][T11315] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: 00000000000000de [ 385.027528][T11315] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 385.035484][T11315] FS: 00007f8a174566c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 385.044398][T11315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.050965][T11315] CR2: 00007f1d59c88286 CR3: 000000007cfba000 CR4: 00000000003526f0 [ 385.058928][T11315] Call Trace: [ 385.062206][T11315] [ 385.065124][T11315] create_new_namespaces+0x47a/0x540 [ 385.070400][T11315] unshare_nsproxy_namespaces+0x11c/0x170 [ 385.076106][T11315] ksys_unshare+0x4c8/0x8c0 [ 385.080601][T11315] ? __pfx_ksys_unshare+0x10/0x10 [ 385.085613][T11315] __x64_sys_unshare+0x38/0x50 [ 385.090361][T11315] do_syscall_64+0xfa/0xfa0 [ 385.094849][T11315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.100923][T11315] ? clear_bhb_loop+0x60/0xb0 [ 385.105603][T11315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.111489][T11315] RIP: 0033:0x7f8a1658f6c9 [ 385.115976][T11315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.135594][T11315] RSP: 002b:00007f8a17456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 385.144011][T11315] RAX: ffffffffffffffda RBX: 00007f8a167e5fa0 RCX: 00007f8a1658f6c9 [ 385.151973][T11315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062020680 [ 385.159928][T11315] RBP: 00007f8a16611f91 R08: 0000000000000000 R09: 0000000000000000 [ 385.167881][T11315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.175857][T11315] R13: 00007f8a167e6038 R14: 00007f8a167e5fa0 R15: 00007ffebca0d618 [ 385.183838][T11315] [ 385.186864][T11315] Modules linked in: [ 385.192530][T11315] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.285321][T11209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.352142][T11315] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 385.357572][T11315] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 385.378847][T11315] RSP: 0018:ffffc900053c7d08 EFLAGS: 00010207 [ 385.394654][T11315] RAX: 1ffff11003a54460 RBX: ffff88801d2a22d8 RCX: 0000000000000000 [ 385.403182][T11315] RDX: 0000000000000000 RSI: ffffffff8da8b2a1 RDI: 00000000ffffffff [ 385.435831][T11315] RBP: 000000000000002e R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 385.443859][T11315] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: 00000000000000de [ 385.477283][T11315] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 385.508660][T11315] FS: 00007f8a174566c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 385.523169][T11315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.531072][T11315] CR2: 000056140dbb9950 CR3: 000000007cfba000 CR4: 00000000003526f0 [ 385.540444][T11315] Kernel panic - not syncing: Fatal exception [ 385.546838][T11315] Kernel Offset: disabled [ 385.551154][T11315] Rebooting in 86400 seconds..