last executing test programs: 2.195287384s ago: executing program 0 (id=1034): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.030411127s ago: executing program 0 (id=1037): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118) 1.899396659s ago: executing program 0 (id=1038): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto(r4, 0x0, 0x0, 0x1, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) 1.702457525s ago: executing program 0 (id=1040): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) 1.661055896s ago: executing program 2 (id=1041): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0xd8) 1.616742978s ago: executing program 0 (id=1042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="f6", 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) 1.478404377s ago: executing program 0 (id=1043): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="c505", 0x2}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x76) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 1.447112896s ago: executing program 2 (id=1044): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 1.443049558s ago: executing program 3 (id=1045): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0xd8) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.295678411s ago: executing program 2 (id=1046): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) 1.082839814s ago: executing program 2 (id=1048): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) 918.473538ms ago: executing program 2 (id=1050): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008040) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7fffffdd, 0x570862) 814.405119ms ago: executing program 1 (id=1052): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0xd8) 795.989332ms ago: executing program 2 (id=1053): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000010640)={'tunl0\x00', 0x0}) 626.415066ms ago: executing program 1 (id=1054): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 545.125663ms ago: executing program 1 (id=1055): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="f6", 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r3, 0x0, 0x0) 541.470188ms ago: executing program 3 (id=1056): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) 401.909395ms ago: executing program 3 (id=1057): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c001980080001"], 0x44}}, 0x0) 396.228019ms ago: executing program 1 (id=1058): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 301.113585ms ago: executing program 1 (id=1059): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) 266.077675ms ago: executing program 3 (id=1060): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) 102.511369ms ago: executing program 1 (id=1061): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) unshare(0x60000600) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 102.016466ms ago: executing program 3 (id=1062): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r4, 0x0, 0x0, 0x1, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setresgid(0xee01, 0x0, r5) 0s ago: executing program 3 (id=1063): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fcntl$getflags(r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 83.441198][ T5811] cgroup: Unknown subsys name 'net' [ 83.557290][ T5811] cgroup: Unknown subsys name 'cpuset' [ 83.567313][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.245929][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.295031][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.296513][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.304575][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.310800][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.317402][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.326667][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.333231][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.339222][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.346127][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.353526][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.360773][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.375262][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.375938][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.383356][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.393902][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.399096][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.404317][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.411364][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.428428][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.439338][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.000587][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 90.064683][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 90.176901][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 90.298901][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.307127][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.315115][ T5820] bridge_slave_0: entered allmulticast mode [ 90.324029][ T5820] bridge_slave_0: entered promiscuous mode [ 90.364266][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.371525][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.381065][ T5820] bridge_slave_1: entered allmulticast mode [ 90.388586][ T5820] bridge_slave_1: entered promiscuous mode [ 90.415329][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.422509][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.429900][ T5822] bridge_slave_0: entered allmulticast mode [ 90.437432][ T5822] bridge_slave_0: entered promiscuous mode [ 90.450494][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.457977][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.465538][ T5822] bridge_slave_1: entered allmulticast mode [ 90.473093][ T5822] bridge_slave_1: entered promiscuous mode [ 90.498572][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 90.532536][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.576317][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.616785][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.661510][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.684563][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.691797][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.699993][ T5823] bridge_slave_0: entered allmulticast mode [ 90.708341][ T5823] bridge_slave_0: entered promiscuous mode [ 90.744635][ T5820] team0: Port device team_slave_0 added [ 90.750706][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.758058][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.765616][ T5823] bridge_slave_1: entered allmulticast mode [ 90.773574][ T5823] bridge_slave_1: entered promiscuous mode [ 90.802113][ T5820] team0: Port device team_slave_1 added [ 90.836330][ T5822] team0: Port device team_slave_0 added [ 90.883616][ T5822] team0: Port device team_slave_1 added [ 90.896612][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.904309][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.911642][ T5821] bridge_slave_0: entered allmulticast mode [ 90.920199][ T5821] bridge_slave_0: entered promiscuous mode [ 90.944926][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.968033][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.975392][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.982791][ T5821] bridge_slave_1: entered allmulticast mode [ 90.990138][ T5821] bridge_slave_1: entered promiscuous mode [ 90.999186][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.006856][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.033235][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.047814][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.084906][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.091900][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.118862][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.143946][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.150937][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.178336][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.191246][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.198773][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.224939][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.279591][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.293471][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.305843][ T5823] team0: Port device team_slave_0 added [ 91.315438][ T5823] team0: Port device team_slave_1 added [ 91.405826][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.413540][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.440382][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.466650][ T5821] team0: Port device team_slave_0 added [ 91.486888][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.494527][ T5832] Bluetooth: hci2: command tx timeout [ 91.500187][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.500231][ T5832] Bluetooth: hci3: command tx timeout [ 91.532361][ T5825] Bluetooth: hci0: command tx timeout [ 91.533086][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.538314][ T5145] Bluetooth: hci1: command tx timeout [ 91.561153][ T5820] hsr_slave_0: entered promiscuous mode [ 91.568779][ T5820] hsr_slave_1: entered promiscuous mode [ 91.577937][ T5821] team0: Port device team_slave_1 added [ 91.590062][ T5822] hsr_slave_0: entered promiscuous mode [ 91.597394][ T5822] hsr_slave_1: entered promiscuous mode [ 91.603834][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 91.609657][ T5822] Cannot create hsr debugfs directory [ 91.690623][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.698078][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.724980][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.785150][ T5823] hsr_slave_0: entered promiscuous mode [ 91.791843][ T5823] hsr_slave_1: entered promiscuous mode [ 91.798587][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 91.804417][ T5823] Cannot create hsr debugfs directory [ 91.810985][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.818482][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.844566][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.079150][ T5821] hsr_slave_0: entered promiscuous mode [ 92.086034][ T5821] hsr_slave_1: entered promiscuous mode [ 92.092291][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 92.098328][ T5821] Cannot create hsr debugfs directory [ 92.139941][ T44] cfg80211: failed to load regulatory.db [ 92.387635][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.420711][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.444246][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.464103][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.516638][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.529924][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.540721][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.554721][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.665979][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.680124][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.691353][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.708132][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.796301][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.808275][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.820294][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.844495][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.902194][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.945800][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.979227][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.021048][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.033331][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.040634][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.071402][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.078663][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.089223][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.096513][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.145870][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.153102][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.236243][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.277421][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.308726][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.371881][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.379267][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.392382][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.399653][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.439201][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.518605][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.525904][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.568372][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.575610][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.584071][ T5832] Bluetooth: hci2: command tx timeout [ 93.586533][ T5145] Bluetooth: hci3: command tx timeout [ 93.590316][ T5825] Bluetooth: hci1: command tx timeout [ 93.596052][ T5837] Bluetooth: hci0: command tx timeout [ 93.679075][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.820350][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.855972][ T5822] veth0_vlan: entered promiscuous mode [ 93.905961][ T5822] veth1_vlan: entered promiscuous mode [ 93.941504][ T5820] veth0_vlan: entered promiscuous mode [ 93.957018][ T5820] veth1_vlan: entered promiscuous mode [ 94.067868][ T5820] veth0_macvtap: entered promiscuous mode [ 94.079553][ T5822] veth0_macvtap: entered promiscuous mode [ 94.098732][ T5820] veth1_macvtap: entered promiscuous mode [ 94.111418][ T5822] veth1_macvtap: entered promiscuous mode [ 94.157873][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.207748][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.220131][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.246183][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.263846][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.277274][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.305840][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.315290][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.330823][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.346111][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.355917][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.381278][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.391198][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.430020][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.500154][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.509849][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.539296][ T5821] veth0_vlan: entered promiscuous mode [ 94.598046][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.601805][ T5823] veth0_vlan: entered promiscuous mode [ 94.614172][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.665096][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.665815][ T5821] veth1_vlan: entered promiscuous mode [ 94.678776][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.697390][ T5823] veth1_vlan: entered promiscuous mode [ 94.724840][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.753358][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.794919][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.818867][ T5821] veth0_macvtap: entered promiscuous mode [ 94.839664][ T5823] veth0_macvtap: entered promiscuous mode [ 94.855770][ T5823] veth1_macvtap: entered promiscuous mode [ 94.871939][ T5821] veth1_macvtap: entered promiscuous mode [ 94.947297][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.978153][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.021429][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.061825][ T1312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.081604][ T1312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.106025][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.121187][ T1312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.188153][ T1312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.210012][ T5922] netlink: 'syz.3.5': attribute type 11 has an invalid length. [ 95.218536][ T1312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.229898][ T5922] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5'. [ 95.252936][ T1312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.265478][ T1312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.287000][ T1312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.477298][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.503462][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.654255][ T5145] Bluetooth: hci2: command tx timeout [ 95.665287][ T5837] Bluetooth: hci1: command tx timeout [ 95.665322][ T5825] Bluetooth: hci0: command tx timeout [ 95.677310][ T5832] Bluetooth: hci3: command tx timeout [ 95.718623][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.727268][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.748669][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.764466][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.860591][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.871308][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.229296][ T5984] overlay: Unknown parameter '/' [ 97.733250][ T5832] Bluetooth: hci2: command tx timeout [ 97.738733][ T5832] Bluetooth: hci1: command tx timeout [ 97.744667][ T5825] Bluetooth: hci3: command tx timeout [ 97.744690][ T5145] Bluetooth: hci0: command tx timeout [ 100.090820][ T6065] tipc: Enabling of bearer rejected, failed to enable media [ 101.038815][ T6089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 103.465880][ T6163] netlink: 'syz.3.124': attribute type 11 has an invalid length. [ 103.525780][ T6163] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.124'. [ 108.505263][ T6325] process 'syz.1.204' launched '/dev/fd/8' with NULL argv: empty string added [ 110.349844][ T6388] netlink: 'syz.0.236': attribute type 11 has an invalid length. [ 110.376586][ T6388] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.236'. [ 122.554582][ T6636] netlink: 'syz.1.358': attribute type 11 has an invalid length. [ 122.572863][ T6636] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.358'. [ 123.218615][ T6650] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.483973][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.679822][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 123.702461][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.728624][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.764833][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.785360][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.810754][ T5891] usb 1-1: Product: syz [ 123.819525][ T5891] usb 1-1: Manufacturer: syz [ 123.828957][ T5891] usb 1-1: SerialNumber: syz [ 124.150257][ T5891] usb 1-1: 0:2 : does not exist [ 124.155609][ T5891] usb 1-1: unit 6 not found! [ 124.256608][ T5891] usb 1-1: USB disconnect, device number 2 [ 124.393945][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.436331][ T6675] netlink: 'syz.1.375': attribute type 11 has an invalid length. [ 124.458486][ T6675] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.375'. [ 126.138671][ T6712] netlink: 'syz.2.388': attribute type 11 has an invalid length. [ 126.168015][ T6712] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.388'. [ 137.178729][ T6852] netlink: 'syz.0.465': attribute type 11 has an invalid length. [ 137.186672][ T6852] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.465'. [ 138.221863][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.232467][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.343196][ T6924] ======================================================= [ 141.343196][ T6924] WARNING: The mand mount option has been deprecated and [ 141.343196][ T6924] and is ignored by this kernel. Remove the mand [ 141.343196][ T6924] option from the mount to silence this warning. [ 141.343196][ T6924] ======================================================= [ 141.413764][ T6924] binder: Unknown parameter 'context' [ 148.180695][ T7038] netlink: 'syz.0.549': attribute type 11 has an invalid length. [ 148.201137][ T7038] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.549'. [ 162.538329][ T7184] netlink: 'syz.2.630': attribute type 11 has an invalid length. [ 162.557555][ T7184] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.630'. [ 165.790921][ T7275] netlink: 'syz.3.671': attribute type 11 has an invalid length. [ 165.799414][ T7275] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.671'. [ 184.633002][ T7496] netlink: 'syz.2.776': attribute type 11 has an invalid length. [ 184.651245][ T7496] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.776'. [ 197.457821][ T7746] netlink: 'syz.0.893': attribute type 11 has an invalid length. [ 197.482770][ T7746] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.893'. [ 199.658847][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.665419][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.237131][ T7865] netlink: 'syz.0.952': attribute type 11 has an invalid length. [ 204.255229][ T7865] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.952'. [ 211.974108][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.975976][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 211.980284][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 211.986307][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 215.503860][ T8084] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 215.510107][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.1.1061 Not tainted syzkaller #0 PREEMPT(full) [ 215.519497][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.529562][ T8084] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 215.534876][ T8084] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 215.554498][ T8084] RSP: 0018:ffffc9001893fd08 EFLAGS: 00010207 [ 215.560596][ T8084] RAX: 1ffff1100c7e3ed5 RBX: ffff888063f1f680 RCX: 0000000000080000 [ 215.568600][ T8084] RDX: ffffc9000b4da000 RSI: 000000000007ffff RDI: 0000000000080000 [ 215.576582][ T8084] RBP: 000000000000002e R08: ffff88807d29281f R09: 1ffff1100fa52503 [ 215.584563][ T8084] R10: dffffc0000000000 R11: ffffed100fa52504 R12: 0000000000000019 [ 215.592555][ T8084] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 215.600549][ T8084] FS: 00007f5f572e96c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 215.609492][ T8084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.616088][ T8084] CR2: 00007fee4b151f98 CR3: 0000000030d30000 CR4: 00000000003526f0 [ 215.624071][ T8084] Call Trace: [ 215.627369][ T8084] [ 215.630340][ T8084] create_new_namespaces+0x47a/0x540 [ 215.635662][ T8084] unshare_nsproxy_namespaces+0x11c/0x170 [ 215.641415][ T8084] ksys_unshare+0x4c8/0x8c0 [ 215.645946][ T8084] ? __pfx_ksys_unshare+0x10/0x10 [ 215.651002][ T8084] __x64_sys_unshare+0x38/0x50 [ 215.655787][ T8084] do_syscall_64+0xfa/0xfa0 [ 215.660311][ T8084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.666396][ T8084] ? clear_bhb_loop+0x60/0xb0 [ 215.671111][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.677030][ T8084] RIP: 0033:0x7f5f5638f6c9 [ 215.681481][ T8084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.701215][ T8084] RSP: 002b:00007f5f572e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 215.709659][ T8084] RAX: ffffffffffffffda RBX: 00007f5f565e5fa0 RCX: 00007f5f5638f6c9 [ 215.717653][ T8084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 215.725643][ T8084] RBP: 00007f5f56411f91 R08: 0000000000000000 R09: 0000000000000000 [ 215.733651][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.741738][ T8084] R13: 00007f5f565e6038 R14: 00007f5f565e5fa0 R15: 00007ffccfc49648 [ 215.749731][ T8084] [ 215.752762][ T8084] Modules linked in: [ 215.757162][ T8084] ---[ end trace 0000000000000000 ]--- [ 215.775681][ T8084] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 215.781150][ T8084] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 215.802018][ T8084] RSP: 0018:ffffc9001893fd08 EFLAGS: 00010207 [ 215.808628][ T8084] RAX: 1ffff1100c7e3ed5 RBX: ffff888063f1f680 RCX: 0000000000080000 [ 215.822752][ T8084] RDX: ffffc9000b4da000 RSI: 000000000007ffff RDI: 0000000000080000 [ 215.839830][ T8084] RBP: 000000000000002e R08: ffff88807d29281f R09: 1ffff1100fa52503 [ 215.858077][ T8084] R10: dffffc0000000000 R11: ffffed100fa52504 R12: 0000000000000019 [ 215.881002][ T8084] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 215.897707][ T8084] FS: 00007f5f572e96c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 215.916974][ T8084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.932157][ T8084] CR2: 0000200000003c00 CR3: 0000000030d30000 CR4: 00000000003526f0 [ 215.952259][ T8084] Kernel panic - not syncing: Fatal exception [ 215.958790][ T8084] Kernel Offset: disabled [ 215.963309][ T8084] Rebooting in 86400 seconds..