last executing test programs: 4.994924329s ago: executing program 2 (id=3497): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 4.844595445s ago: executing program 2 (id=3498): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500), 0x0, 0x0, 0x2) 4.671690431s ago: executing program 2 (id=3501): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x5}) 4.414751619s ago: executing program 2 (id=3502): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 3.930397398s ago: executing program 0 (id=3507): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 3.702607795s ago: executing program 0 (id=3510): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x1b11, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x4080, 0x0, 0x0) 3.498585553s ago: executing program 0 (id=3514): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000"], 0x80}}, 0x0) 3.495630771s ago: executing program 1 (id=3515): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) close(r4) 3.319589077s ago: executing program 1 (id=3518): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) 3.29176299s ago: executing program 0 (id=3519): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) 3.134431559s ago: executing program 0 (id=3521): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x1, 0xeeef0000, 0x2000, &(0x7f0000338000/0x2000)=nil}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x1c1040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0xf000, 0x1000, &(0x7f0000e82000/0x1000)=nil}) 3.101835245s ago: executing program 1 (id=3522): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2.89463564s ago: executing program 1 (id=3524): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r1, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10140, 0x0) 2.768528117s ago: executing program 1 (id=3526): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) fgetxattr(r2, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) 2.551924843s ago: executing program 1 (id=3527): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 1.358525807s ago: executing program 4 (id=3541): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5434, 0x0) 1.298423669s ago: executing program 2 (id=3543): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = inotify_init1(0x800) fcntl$dupfd(r4, 0x0, r5) 1.227217602s ago: executing program 4 (id=3544): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) 1.022627589s ago: executing program 4 (id=3546): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1, 0x5, 0x73, 0xffefffff}, {0x6, 0x8, 0x6}]}, 0x10) 864.089124ms ago: executing program 4 (id=3548): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)) 854.497363ms ago: executing program 3 (id=3549): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}], 0x4}, 0x1009}], 0x2, 0x40012160, 0x0) 759.679621ms ago: executing program 4 (id=3550): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 622.504545ms ago: executing program 3 (id=3551): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) close(r4) 511.994562ms ago: executing program 3 (id=3552): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 409.501269ms ago: executing program 4 (id=3553): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x3000, 0x8, 0xb, 0x3, 0x4, 0x44, 0xd, 0x0, 0x2e, 0x17, 0xe}, {0x5000, 0x4000, 0x3, 0x9, 0x40, 0x7, 0x7f, 0x15, 0x5, 0x6, 0x3}, {0x80a0000, 0x4000, 0x9, 0x3, 0x1, 0xc, 0x0, 0x60, 0x0, 0xa7, 0x8, 0x81}, {0x2000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xfa, 0x9, 0x9, 0x6}, {0x1000, 0x3000, 0x10, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x4000, 0xc, 0xa0, 0xb3, 0x8, 0x0, 0xa4, 0x9, 0x13, 0x1, 0xf}, {0x8088000, 0xeeee8000, 0x4, 0x4, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x71}, {0x0, 0x0, 0x0, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0x18002, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x3000, 0x212520, 0x5, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x60, 0x3]}) 378.148942ms ago: executing program 3 (id=3554): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5434, 0x0) 206.736855ms ago: executing program 0 (id=3555): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x1c}], 0x1}, 0x0) 206.029226ms ago: executing program 3 (id=3556): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) 76.975311ms ago: executing program 2 (id=3557): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) unshare(0x22020600) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) 0s ago: executing program 3 (id=3558): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 83.182759][ T5813] cgroup: Unknown subsys name 'net' [ 83.359589][ T5813] cgroup: Unknown subsys name 'cpuset' [ 83.368709][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.061659][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.647642][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.657183][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.669103][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.677578][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.681004][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.689344][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.693599][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.701908][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.708760][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.719396][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.723161][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.729377][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.737710][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.752616][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.758288][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.761083][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.776320][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.787986][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.788625][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.796300][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.805363][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.817198][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.817506][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.835226][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.852178][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.421707][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 91.642094][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.656852][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 91.757507][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 91.813374][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.821235][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.828869][ T5825] bridge_slave_0: entered allmulticast mode [ 91.836549][ T5825] bridge_slave_0: entered promiscuous mode [ 91.883284][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.890583][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.898113][ T5825] bridge_slave_1: entered allmulticast mode [ 91.905505][ T5825] bridge_slave_1: entered promiscuous mode [ 92.067828][ T24] cfg80211: failed to load regulatory.db [ 92.081878][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.105033][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.112597][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.120135][ T5827] bridge_slave_0: entered allmulticast mode [ 92.127546][ T5827] bridge_slave_0: entered promiscuous mode [ 92.154824][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.162283][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.169683][ T5824] bridge_slave_0: entered allmulticast mode [ 92.177465][ T5824] bridge_slave_0: entered promiscuous mode [ 92.188308][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.212132][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.219418][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.226831][ T5827] bridge_slave_1: entered allmulticast mode [ 92.234212][ T5827] bridge_slave_1: entered promiscuous mode [ 92.242496][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 92.255853][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.263119][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.270362][ T5824] bridge_slave_1: entered allmulticast mode [ 92.277935][ T5824] bridge_slave_1: entered promiscuous mode [ 92.298098][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.305289][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.312765][ T5828] bridge_slave_0: entered allmulticast mode [ 92.320578][ T5828] bridge_slave_0: entered promiscuous mode [ 92.376182][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.383415][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.391598][ T5828] bridge_slave_1: entered allmulticast mode [ 92.399591][ T5828] bridge_slave_1: entered promiscuous mode [ 92.433982][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.458710][ T5825] team0: Port device team_slave_0 added [ 92.467602][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.492081][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.517112][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.528466][ T5825] team0: Port device team_slave_1 added [ 92.609679][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.657588][ T5824] team0: Port device team_slave_0 added [ 92.665866][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.677514][ T5827] team0: Port device team_slave_0 added [ 92.690200][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.697525][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.723611][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.737904][ T5824] team0: Port device team_slave_1 added [ 92.744259][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.751288][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.777511][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.788933][ T52] Bluetooth: hci1: command tx timeout [ 92.808534][ T5827] team0: Port device team_slave_1 added [ 92.865748][ T52] Bluetooth: hci0: command tx timeout [ 92.896050][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.903237][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.911519][ T5826] bridge_slave_0: entered allmulticast mode [ 92.919574][ T5826] bridge_slave_0: entered promiscuous mode [ 92.942874][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.950091][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.950125][ T52] Bluetooth: hci2: command tx timeout [ 92.950144][ T5146] Bluetooth: hci4: command tx timeout [ 92.977621][ T52] Bluetooth: hci3: command tx timeout [ 92.982377][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.007787][ T5828] team0: Port device team_slave_0 added [ 93.026880][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.034546][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.042298][ T5826] bridge_slave_1: entered allmulticast mode [ 93.049955][ T5826] bridge_slave_1: entered promiscuous mode [ 93.073939][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.081239][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.107391][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.120997][ T5828] team0: Port device team_slave_1 added [ 93.127845][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.134811][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.161739][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.220480][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.227587][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.263399][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.290541][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.304407][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.331040][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.338168][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.364489][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.388831][ T5825] hsr_slave_0: entered promiscuous mode [ 93.395471][ T5825] hsr_slave_1: entered promiscuous mode [ 93.430381][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.437510][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.463547][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.524166][ T5826] team0: Port device team_slave_0 added [ 93.532783][ T5826] team0: Port device team_slave_1 added [ 93.572323][ T5827] hsr_slave_0: entered promiscuous mode [ 93.579830][ T5827] hsr_slave_1: entered promiscuous mode [ 93.586519][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 93.592360][ T5827] Cannot create hsr debugfs directory [ 93.666825][ T5824] hsr_slave_0: entered promiscuous mode [ 93.673381][ T5824] hsr_slave_1: entered promiscuous mode [ 93.680379][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 93.686546][ T5824] Cannot create hsr debugfs directory [ 93.712104][ T5828] hsr_slave_0: entered promiscuous mode [ 93.719159][ T5828] hsr_slave_1: entered promiscuous mode [ 93.725643][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 93.731397][ T5828] Cannot create hsr debugfs directory [ 93.781216][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.788579][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.815252][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.828649][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.835663][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.862823][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.140245][ T5826] hsr_slave_0: entered promiscuous mode [ 94.147637][ T5826] hsr_slave_1: entered promiscuous mode [ 94.153975][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 94.159874][ T5826] Cannot create hsr debugfs directory [ 94.474188][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.487762][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.519402][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.546721][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.622955][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.636638][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.650765][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.662403][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.765929][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.778552][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.800146][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.811839][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.866470][ T52] Bluetooth: hci1: command tx timeout [ 94.933865][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.947027][ T52] Bluetooth: hci0: command tx timeout [ 94.962775][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.997124][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.006034][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.020923][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.027795][ T52] Bluetooth: hci2: command tx timeout [ 95.027849][ T52] Bluetooth: hci4: command tx timeout [ 95.036395][ T5146] Bluetooth: hci3: command tx timeout [ 95.104421][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.139699][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.169622][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.182561][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.189967][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.213230][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.229817][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.237024][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.253358][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.280276][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.287328][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.349721][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.356946][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.391974][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.399164][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.437133][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.457688][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.504903][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.543029][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.550490][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.561652][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.568990][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.728863][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.812909][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.848792][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.856066][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.889485][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.908357][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.915643][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.983364][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.019889][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.071769][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.079186][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.111738][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.119044][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.211715][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.287976][ T5825] veth0_vlan: entered promiscuous mode [ 96.307479][ T5825] veth1_vlan: entered promiscuous mode [ 96.497946][ T5828] veth0_vlan: entered promiscuous mode [ 96.526127][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.533867][ T5825] veth0_macvtap: entered promiscuous mode [ 96.580695][ T5825] veth1_macvtap: entered promiscuous mode [ 96.598493][ T5828] veth1_vlan: entered promiscuous mode [ 96.669182][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.703956][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.739389][ T1333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.750905][ T1333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.763485][ T1333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.811971][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.821083][ T1333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.860940][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.945383][ T5828] veth0_macvtap: entered promiscuous mode [ 96.955942][ T5146] Bluetooth: hci1: command tx timeout [ 96.999965][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.011978][ T5828] veth1_macvtap: entered promiscuous mode [ 97.022799][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.036324][ T5146] Bluetooth: hci0: command tx timeout [ 97.106825][ T52] Bluetooth: hci4: command tx timeout [ 97.112389][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.112719][ T52] Bluetooth: hci2: command tx timeout [ 97.127347][ T5146] Bluetooth: hci3: command tx timeout [ 97.147431][ T5826] veth0_vlan: entered promiscuous mode [ 97.155211][ T5824] veth0_vlan: entered promiscuous mode [ 97.167641][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.175467][ T5826] veth1_vlan: entered promiscuous mode [ 97.181529][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.199875][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.254851][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.264349][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.305336][ T5824] veth1_vlan: entered promiscuous mode [ 97.314417][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.322179][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.324887][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.372222][ T5826] veth0_macvtap: entered promiscuous mode [ 97.382147][ T5827] veth0_vlan: entered promiscuous mode [ 97.451208][ T5826] veth1_macvtap: entered promiscuous mode [ 97.482294][ T5827] veth1_vlan: entered promiscuous mode [ 97.575422][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.591240][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.603578][ T5824] veth0_macvtap: entered promiscuous mode [ 97.620445][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.669982][ T5824] veth1_macvtap: entered promiscuous mode [ 97.686483][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.728339][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.772084][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781774][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.797459][ T5827] veth0_macvtap: entered promiscuous mode [ 97.811074][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.829533][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.852117][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.856608][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.867304][ T5827] veth1_macvtap: entered promiscuous mode [ 97.879659][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.901995][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.950968][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.971628][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.994221][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.049728][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.114077][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.187665][ T5947] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 98.201782][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.213583][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.234244][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.252939][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.270388][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.300788][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.399578][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.410631][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.491131][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.527474][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.663040][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.674725][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.727781][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.761273][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.836152][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.987561][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.001815][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.012002][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.034494][ T52] Bluetooth: hci1: command tx timeout [ 99.050703][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 99.073273][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.089055][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.099984][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.109550][ T52] Bluetooth: hci0: command tx timeout [ 99.115416][ T24] usb 2-1: Product: syz [ 99.120184][ T24] usb 2-1: Manufacturer: syz [ 99.125093][ T24] usb 2-1: SerialNumber: syz [ 99.153988][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 99.163853][ T24] cdc_ncm 2-1:1.0: bind() failure [ 99.186138][ T52] Bluetooth: hci2: command tx timeout [ 99.191628][ T52] Bluetooth: hci3: command tx timeout [ 99.197170][ T5146] Bluetooth: hci4: command tx timeout [ 99.389368][ T5900] usb 2-1: USB disconnect, device number 2 [ 99.416376][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.274149][ T5991] binder: 5990:5991 ioctl c0306201 200000000640 returned -22 [ 100.368652][ T5994] binder: 5993:5994 ioctl c0306201 200000000100 returned -14 [ 101.028244][ T6013] netlink: 'syz.3.33': attribute type 2 has an invalid length. [ 101.048542][ T6013] netlink: 1 bytes leftover after parsing attributes in process `syz.3.33'. [ 101.976240][ T6047] ======================================================= [ 101.976240][ T6047] WARNING: The mand mount option has been deprecated and [ 101.976240][ T6047] and is ignored by this kernel. Remove the mand [ 101.976240][ T6047] option from the mount to silence this warning. [ 101.976240][ T6047] ======================================================= [ 102.040840][ T6047] binder: Unknown parameter 'context' [ 103.444364][ T6093] netlink: 'syz.1.71': attribute type 2 has an invalid length. [ 103.457036][ T6093] netlink: 1 bytes leftover after parsing attributes in process `syz.1.71'. [ 104.313446][ T6122] can0: slcan on ttyS3. [ 104.336308][ T6122] capability: warning: `syz.4.85' uses 32-bit capabilities (legacy support in use) [ 104.588866][ T6122] can0 (unregistered): slcan off ttyS3. [ 104.604139][ T6122] Falling back ldisc for ttyS3. [ 105.046502][ T6145] kvm: pic: non byte read [ 105.051506][ T6145] kvm: pic: non byte read [ 105.081373][ T6145] kvm: pic: single mode not supported [ 105.081505][ T6145] kvm: pic: level sensitive irq not supported [ 105.103749][ T6145] kvm: pic: non byte read [ 105.194168][ T6145] kvm: pic: single mode not supported [ 105.194246][ T6145] kvm: pic: non byte read [ 105.258212][ T6145] kvm: pic: non byte read [ 105.263099][ T6145] kvm: pic: non byte read [ 105.313296][ T6145] kvm: pic: single mode not supported [ 105.313320][ T6145] kvm: pic: level sensitive irq not supported [ 105.335714][ T6145] kvm: pic: non byte read [ 105.381736][ T6145] kvm: pic: single mode not supported [ 105.381818][ T6145] kvm: pic: non byte read [ 105.409841][ T6145] kvm: pic: non byte read [ 105.450501][ T6161] binder: 6160:6161 ioctl c00c6211 0 returned -14 [ 106.137269][ T6178] netlink: 'syz.2.105': attribute type 2 has an invalid length. [ 106.144987][ T6178] netlink: 1 bytes leftover after parsing attributes in process `syz.2.105'. [ 107.490419][ T6214] kvm: pic: non byte read [ 107.524257][ T6214] kvm: pic: single mode not supported [ 107.524282][ T6214] kvm: pic: level sensitive irq not supported [ 107.537927][ T6214] kvm: pic: single mode not supported [ 107.548899][ T6214] kvm: pic: single mode not supported [ 107.554371][ T6214] kvm: pic: level sensitive irq not supported [ 107.580764][ T6214] kvm: pic: single mode not supported [ 107.822022][ T6229] netlink: 'syz.1.122': attribute type 2 has an invalid length. [ 107.875227][ T6229] netlink: 1 bytes leftover after parsing attributes in process `syz.1.122'. [ 108.608861][ T6251] can0: slcan on ttyS3. [ 108.767499][ T6251] can0 (unregistered): slcan off ttyS3. [ 108.775148][ T6251] Falling back ldisc for ttyS3. [ 109.888697][ T6283] can0: slcan on ttyS3. [ 110.057122][ T6287] netlink: 'syz.2.149': attribute type 2 has an invalid length. [ 110.064869][ T6287] netlink: 1 bytes leftover after parsing attributes in process `syz.2.149'. [ 110.159406][ T6283] can0 (unregistered): slcan off ttyS3. [ 113.106588][ T6355] netlink: 'syz.0.162': attribute type 2 has an invalid length. [ 113.114447][ T6355] netlink: 1 bytes leftover after parsing attributes in process `syz.0.162'. [ 116.169843][ T6402] netlink: 'syz.1.189': attribute type 2 has an invalid length. [ 116.207978][ T6402] netlink: 1 bytes leftover after parsing attributes in process `syz.1.189'. [ 118.899255][ T6446] can0: slcan on ttyS3. [ 119.147010][ T6446] can0 (unregistered): slcan off ttyS3. [ 119.166386][ T6446] Falling back ldisc for ttyS3. [ 120.619485][ T6477] binder: 6471:6477 ioctl c0306201 2000000001c0 returned -14 [ 120.946102][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 120.952489][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.185447][ T6489] can0: slcan on ttyS3. [ 121.398301][ T6492] can0 (unregistered): slcan off ttyS3. [ 121.425041][ T6492] Falling back ldisc for ttyS3. [ 122.246866][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.228'. [ 123.808405][ T6551] netlink: 'syz.4.244': attribute type 2 has an invalid length. [ 123.851194][ T6551] netlink: 1 bytes leftover after parsing attributes in process `syz.4.244'. [ 130.122805][ T6671] Zero length message leads to an empty skb [ 132.862008][ T6713] overlayfs: failed to resolve './file1': -2 [ 134.301559][ T6729] overlayfs: failed to resolve './file1': -2 [ 134.526993][ T6733] overlayfs: failed to resolve './file1': -2 [ 135.327090][ T6749] binfmt_misc: register: failed to install interpreter file ./file0 [ 135.494933][ T6756] overlayfs: failed to resolve './file1': -2 [ 135.524488][ T6759] overlayfs: failed to resolve './file1': -2 [ 136.345262][ T6791] overlayfs: failed to resolve './file1': -2 [ 136.619317][ T6804] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.279030][ T6826] can0: slcan on ttyS3. [ 137.440322][ T6833] 8021q: VLANs not supported on xfrm0 [ 137.465667][ T6826] can0 (unregistered): slcan off ttyS3. [ 137.472106][ T6826] Falling back ldisc for ttyS3. [ 138.166380][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.173208][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.401659][ T6878] overlayfs: failed to resolve './file0': -2 [ 140.177900][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'. [ 141.141420][ T6921] overlayfs: failed to resolve './file1': -2 [ 142.133848][ T6951] overlayfs: failed to resolve './file1': -2 [ 142.759743][ T6975] netlink: 'syz.0.429': attribute type 2 has an invalid length. [ 142.768912][ T6977] netlink: 388 bytes leftover after parsing attributes in process `syz.4.431'. [ 142.806866][ T6975] netlink: 1 bytes leftover after parsing attributes in process `syz.0.429'. [ 144.553313][ T7035] overlayfs: failed to resolve './file0': -2 [ 145.181971][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.463'. [ 145.538704][ T7062] overlayfs: failed to resolve './file0': -2 [ 146.747145][ T7095] overlayfs: failed to resolve './file0': -2 [ 149.552333][ T7124] netlink: 72 bytes leftover after parsing attributes in process `syz.4.499'. [ 150.472428][ T7136] can0: slcan on ttyS3. [ 150.563802][ T7136] can0 (unregistered): slcan off ttyS3. [ 150.716144][ T7138] veth0_to_team: entered promiscuous mode [ 150.722033][ T7138] veth0_to_team: entered allmulticast mode [ 153.626380][ T7214] can0: slcan on ttyS3. [ 153.743555][ T7214] can0 (unregistered): slcan off ttyS3. [ 159.109820][ T7306] netlink: 9 bytes leftover after parsing attributes in process `syz.3.583'. [ 159.583039][ T7312] veth0_to_team: entered promiscuous mode [ 159.628475][ T7312] veth0_to_team: entered allmulticast mode [ 160.069579][ T7320] binder: Bad value for 'max' [ 162.321962][ T7363] can0: slcan on ttyS3. [ 162.467068][ T7362] can0 (unregistered): slcan off ttyS3. [ 164.589417][ T7408] can0: slcan on ttyS3. [ 164.995837][ T7407] can0 (unregistered): slcan off ttyS3. [ 166.865494][ T7449] can0: slcan on ttyS3. [ 166.998956][ T7448] can0 (unregistered): slcan off ttyS3. [ 168.222341][ T7489] veth0_to_team: entered promiscuous mode [ 168.249288][ T7489] veth0_to_team: entered allmulticast mode [ 171.328064][ T7593] netlink: 44 bytes leftover after parsing attributes in process `syz.1.691'. [ 171.367822][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 171.414738][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 174.040515][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 176.303539][ T7699] netlink: 17 bytes leftover after parsing attributes in process `syz.0.740'. [ 176.815598][ T7707] binder: 7705:7707 ioctl 4018620d 0 returned -22 [ 178.168024][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 185.234184][ T7832] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.422538][ T7876] 9p: Bad value for 'cache' [ 189.261590][ T7909] tipc: Started in network mode [ 189.288285][ T7909] tipc: Node identity 6a9ce6f462de, cluster identity 4711 [ 189.324577][ T7909] tipc: Enabled bearer , priority 0 [ 189.560135][ T7909] tipc: Disabling bearer [ 190.419784][ T7931] binder: 7930:7931 ioctl c0306201 0 returned -14 [ 193.114693][ T7993] binder: 7992:7993 ioctl c0306201 0 returned -14 [ 195.360151][ T8013] 9p: Bad value for 'wfdno' [ 197.438826][ T8049] syz.3.893 (8049) used greatest stack depth: 17864 bytes left [ 197.779254][ T8069] 9p: Bad value for 'rfdno' [ 198.493465][ T8100] 9p: Bad value for 'rfdno' [ 198.513311][ T8102] netlink: 92 bytes leftover after parsing attributes in process `syz.0.923'. [ 198.947698][ T8117] tipc: Failed to remove unknown binding: 66,1,1/0:3116264028/3116264030 [ 198.972622][ T8117] tipc: Failed to remove unknown binding: 66,1,1/0:3116264028/3116264030 [ 198.991886][ T8117] tipc: Failed to remove unknown binding: 66,1,1/0:3116264028/3116264030 [ 199.208634][ T8125] mmap: syz.4.934 (8125) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.344755][ T8131] netlink: 92 bytes leftover after parsing attributes in process `syz.0.937'. [ 199.468563][ T8135] tipc: Enabling of bearer rejected, failed to enable media [ 199.554533][ T8137] 9p: Bad value for 'rfdno' [ 199.560107][ T8139] usb usb9: usbfs: process 8139 (syz.3.941) did not claim interface 0 before use [ 199.643785][ T8143] x_tables: unsorted entry at hook 2 [ 200.198336][ T8163] netlink: 92 bytes leftover after parsing attributes in process `syz.3.953'. [ 200.356067][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.362845][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.221938][ T8194] tipc: Failed to remove unknown binding: 66,1,1/0:2397445550/2397445552 [ 204.250184][ T8194] tipc: Failed to remove unknown binding: 66,1,1/0:2397445550/2397445552 [ 205.145857][ T8204] overlayfs: failed to resolve './file0': -2 [ 206.936744][ T8228] 9p: Bad value for 'cache' [ 207.284381][ T8236] overlayfs: failed to resolve './file0': -2 [ 210.425449][ T8275] binder: 8274:8275 ioctl c0306201 0 returned -14 [ 210.450124][ T8275] tipc: Started in network mode [ 210.468806][ T8275] tipc: Node identity 4, cluster identity 4711 [ 210.475912][ T8275] tipc: Node number set to 4 [ 212.504613][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1024'. [ 217.304177][ T8382] veth0_to_team: entered promiscuous mode [ 217.330629][ T8382] veth0_to_team: entered allmulticast mode [ 218.117879][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 218.118523][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 218.123965][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 218.132935][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 218.142434][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 223.391758][ T8465] 9p: Bad value for 'cache' [ 224.430882][ T8493] 9p: Bad value for 'rfdno' [ 225.440124][ T8522] binder: 8521:8522 ioctl c0306201 0 returned -14 [ 227.237570][ T8565] usb usb9: usbfs: process 8565 (syz.3.1146) did not claim interface 0 before use [ 228.357578][ T8589] usb usb9: usbfs: process 8589 (syz.3.1159) did not claim interface 0 before use [ 229.359488][ T8611] x_tables: unsorted entry at hook 2 [ 229.810271][ T8618] binder: 8616:8618 ioctl c0306201 0 returned -14 [ 229.843901][ T8618] tipc: Started in network mode [ 229.848929][ T8618] tipc: Node identity 4, cluster identity 4711 [ 229.870387][ T8618] tipc: Node number set to 4 [ 230.917578][ T8639] x_tables: unsorted entry at hook 2 [ 231.832631][ T8658] usb usb9: usbfs: process 8658 (syz.4.1190) did not claim interface 0 before use [ 240.964683][ T8793] x_tables: unsorted entry at hook 2 [ 241.912711][ T8802] veth0_to_team: entered promiscuous mode [ 241.950857][ T8802] veth0_to_team: entered allmulticast mode [ 244.177786][ T8839] overlayfs: failed to get inode (-116) [ 244.204446][ T8839] overlayfs: failed to get inode (-116) [ 245.305361][ T8871] x_tables: unsorted entry at hook 2 [ 246.249196][ T8898] overlayfs: failed to get inode (-116) [ 246.275103][ T8898] overlayfs: failed to get inode (-116) [ 253.058398][ T9008] overlayfs: failed to get inode (-116) [ 253.064496][ T9008] overlayfs: failed to get inode (-116) [ 255.612265][ T9056] x_tables: unsorted entry at hook 2 [ 256.698313][ T9074] overlayfs: failed to resolve './file1': -2 [ 257.084508][ T9078] x_tables: unsorted entry at hook 2 [ 258.354794][ T9102] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1391'. [ 260.637000][ T9129] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1412'. [ 261.594413][ T9151] overlayfs: failed to resolve './file0': -2 [ 261.870098][ T9156] overlayfs: failed to get inode (-116) [ 261.876245][ T9156] overlayfs: failed to get inode (-116) [ 262.803528][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.810135][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.705664][ T9213] overlayfs: failed to resolve './file1': -2 [ 264.729186][ T9238] overlayfs: failed to resolve './file1': -2 [ 265.179256][ T9249] x_tables: unsorted entry at hook 2 [ 265.339189][ T9251] usb usb9: usbfs: process 9251 (syz.2.1469) did not claim interface 0 before use [ 265.879246][ T9263] tipc: Failed to remove unknown binding: 66,1,1/4:379565044/379565046 [ 267.866669][ T9308] binder: 9307:9308 ioctl c0306201 0 returned -14 [ 268.125115][ T9314] binder: 9313:9314 ioctl c0306201 0 returned -14 [ 268.135479][ T9314] tipc: Started in network mode [ 268.140746][ T9314] tipc: Node identity 4, cluster identity 4711 [ 268.146938][ T9314] tipc: Node number set to 4 [ 268.392884][ T9319] x_tables: unsorted entry at hook 2 [ 269.116211][ T9339] binder: 9337:9339 ioctl c0306201 0 returned -14 [ 269.841894][ T9362] overlayfs: failed to get inode (-116) [ 269.855069][ T9362] overlayfs: failed to get inode (-116) [ 270.708839][ T9388] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1537'. [ 271.568042][ T9417] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1552'. [ 271.777354][ T9422] overlayfs: failed to get inode (-116) [ 271.783456][ T9422] overlayfs: failed to get inode (-116) [ 271.852616][ T9426] tipc: Failed to remove unknown binding: 66,1,1/4:2730960953/2730960955 [ 273.812215][ T9484] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1582'. [ 274.851586][ T9508] tipc: Failed to remove unknown binding: 66,1,1/4:2287767127/2287767129 [ 275.097660][ T9514] usb usb9: usbfs: process 9514 (syz.0.1598) did not claim interface 0 before use [ 275.316809][ T9518] overlayfs: missing 'lowerdir' [ 277.083738][ T9540] overlayfs: missing 'lowerdir' [ 279.154218][ T9581] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1632'. [ 279.357256][ T9583] 9p: Bad value for 'cachetag' [ 279.596088][ T9589] overlayfs: missing 'lowerdir' [ 279.810735][ T9595] x_tables: unsorted entry at hook 2 [ 280.872521][ T9615] overlayfs: missing 'lowerdir' [ 281.115548][ T9620] tipc: Started in network mode [ 281.138658][ T9620] tipc: Node identity 5a618829650e, cluster identity 4711 [ 281.160165][ T9620] tipc: Enabled bearer , priority 0 [ 281.308871][ T9620] tipc: Disabling bearer [ 283.389837][ T9658] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1670'. [ 284.587476][ T9681] overlayfs: missing 'workdir' [ 286.324034][ T9707] overlayfs: missing 'workdir' [ 287.796019][ T9738] binder: 9736:9738 ioctl c0306201 0 returned -14 [ 287.812627][ T9738] tipc: Cannot configure node identity twice [ 290.091808][ T9769] 9p: Bad value for 'cachetag' [ 291.047673][ T9781] overlayfs: missing 'lowerdir' [ 294.522643][ T9805] overlayfs: failed to get inode (-116) [ 294.570799][ T9805] overlayfs: failed to get inode (-116) [ 294.671762][ T9807] binder: 9806:9807 ioctl c0306201 0 returned -14 [ 294.699580][ T9807] tipc: Cannot configure node identity twice [ 296.987594][ T9828] overlayfs: failed to get inode (-116) [ 297.006879][ T9828] overlayfs: failed to get inode (-116) [ 297.922314][ T9842] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.967344][ T9842] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 299.877669][ T9875] overlayfs: missing 'lowerdir' [ 301.219102][ T9901] tipc: Failed to remove unknown binding: 66,1,1/0:1564036861/1564036863 [ 301.470108][ T9904] overlayfs: missing 'lowerdir' [ 303.019804][ T9934] tipc: Enabled bearer , priority 0 [ 303.120061][ T9934] tipc: Disabling bearer [ 304.250962][ T9960] usb usb9: usbfs: process 9960 (syz.4.1817) did not claim interface 0 before use [ 305.582062][ T9990] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 305.615309][ T9990] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 307.006891][T10003] binder: 10002:10003 ioctl c0306201 0 returned -14 [ 307.038040][T10003] tipc: Cannot configure node identity twice [ 307.524525][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 307.705484][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 307.723640][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.736390][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.756392][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 307.779423][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.807181][ T24] usb 1-1: config 0 descriptor?? [ 307.969237][T10015] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 307.998087][T10015] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 308.266201][ T24] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 308.436170][ T24] playstation 0003:054C:05C4.0001: Invalid reportID received, expected 18 got 123 [ 308.469699][ T24] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -22 [ 308.510019][ T24] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 308.518863][ T24] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 308.558268][ T24] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -22 [ 308.643303][ T24] usb 1-1: USB disconnect, device number 2 [ 310.521269][T10045] x_tables: unsorted entry at hook 2 [ 312.879715][T10059] tipc: Enabled bearer , priority 0 [ 313.017379][T10059] tipc: Disabling bearer [ 314.028233][T10073] overlayfs: missing 'workdir' [ 314.744808][T10081] 9p: Could not find request transport: 0xffffffffffffffff [ 315.888492][T10108] overlayfs: failed to get inode (-116) [ 315.909445][T10108] overlayfs: failed to get inode (-116) [ 316.087455][T10110] overlayfs: failed to resolve './file0': -2 [ 317.095210][T10120] overlayfs: missing 'workdir' [ 317.785070][T10127] tipc: Enabled bearer , priority 0 [ 317.828768][T10127] tipc: Disabling bearer [ 321.121325][T10214] 9p: Bad value for 'cachetag' [ 324.958894][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.965917][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.737862][T10289] 9p: Bad value for 'cachetag' [ 330.718626][T10356] tipc: Enabled bearer , priority 0 [ 330.772391][T10356] tipc: Disabling bearer [ 331.185350][T10372] overlayfs: failed to resolve './file0': -2 [ 333.560600][T10422] tipc: Enabled bearer , priority 0 [ 333.744552][T10422] tipc: Disabling bearer [ 333.821653][T10424] can0: slcan on ttyS3. [ 333.959213][T10428] can0 (unregistered): slcan off ttyS3. [ 334.358563][T10435] tipc: New replicast peer: 0.0.0.0 [ 334.391550][T10435] tipc: Enabled bearer , priority 10 [ 335.923171][T10466] tipc: Enabled bearer , priority 0 [ 336.084680][T10466] tipc: Disabling bearer [ 336.424390][T10479] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2052'. [ 339.076018][T10553] tipc: Enabling of bearer rejected, already enabled [ 339.790043][T10565] 9p: Could not find request transport: 0xffffffffffffffff [ 340.086319][T10573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2092'. [ 341.174697][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2106'. [ 341.476750][T10609] netlink: 'syz.4.2110': attribute type 4 has an invalid length. [ 341.556977][T10609] netlink: 'syz.4.2110': attribute type 4 has an invalid length. [ 341.922549][T10625] tipc: New replicast peer: 0.0.0.0 [ 341.940406][T10625] tipc: Enabled bearer , priority 10 [ 342.137616][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 342.579480][T10639] 9p: Could not find request transport: 0xffffffffffffffff [ 343.086186][ T5913] tipc: Node number set to 1064273961 [ 343.094640][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 343.257038][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 343.271984][ T24] usb 4-1: config 0 has no interfaces? [ 343.281683][ T24] usb 4-1: New USB device found, idVendor=1532, idProduct=d2a2, bcdDevice=f7.ed [ 343.312386][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.344623][ T24] usb 4-1: Product: syz [ 343.365107][ T24] usb 4-1: Manufacturer: syz [ 343.375734][ T24] usb 4-1: SerialNumber: syz [ 343.397633][ T24] usb 4-1: config 0 descriptor?? [ 343.633251][ T24] usb 4-1: USB disconnect, device number 2 [ 345.406945][T10687] tipc: Failed to remove unknown binding: 66,1,1/0:3780782861/3780782863 [ 349.829109][T10744] overlayfs: missing 'lowerdir' [ 350.163146][T10748] tipc: Failed to remove unknown binding: 66,1,1/4:1521337764/1521337766 [ 350.219732][T10748] tipc: Failed to remove unknown binding: 66,1,1/4:1521337764/1521337766 [ 350.228260][T10748] tipc: Failed to remove unknown binding: 66,1,1/4:1521337764/1521337766 [ 352.035380][T10799] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 352.281211][ T30] audit: type=1326 audit(1763074992.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10806 comm="syz.1.2203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f503bb8f6c9 code=0x0 [ 353.464336][T10829] netlink: 'syz.4.2214': attribute type 4 has an invalid length. [ 358.095277][ T30] audit: type=1326 audit(1763074998.191:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.0.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b8418f6c9 code=0x0 [ 358.310292][T10898] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2247'. [ 360.848693][T10979] netlink: 'syz.0.2287': attribute type 4 has an invalid length. [ 360.899968][T10979] netlink: 'syz.0.2287': attribute type 4 has an invalid length. [ 361.740544][T10997] tipc: Enabling of bearer rejected, already enabled [ 361.805874][T10999] overlayfs: missing 'lowerdir' [ 362.929541][T11020] binder: 11019:11020 ioctl c0306201 2000000004c0 returned -22 [ 363.571453][T11031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 363.612074][T11031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 364.254641][T11044] binder: 11043:11044 ioctl 4018620d 0 returned -22 [ 364.274752][T11044] binder: 11043:11044 ioctl c0306201 0 returned -14 [ 365.841603][T11071] netlink: 'syz.2.2331': attribute type 4 has an invalid length. [ 365.886617][T11071] netlink: 'syz.2.2331': attribute type 4 has an invalid length. [ 366.800230][T11094] tipc: Enabling of bearer rejected, already enabled [ 369.428062][T11139] 9p: Could not find request transport: 0xffffffffffffffff [ 369.929008][ T30] audit: type=1326 audit(1763075009.857:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69b338f6c9 code=0x0 [ 370.902574][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2373'. [ 372.089395][T11163] tipc: Enabled bearer , priority 0 [ 372.228446][T11163] tipc: Disabling bearer [ 373.465556][T11193] overlayfs: failed to resolve './file1': -2 [ 374.030451][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 375.534350][T11222] tipc: Failed to remove unknown binding: 66,1,1/4:3732917542/3732917544 [ 375.614829][T11223] tipc: Failed to remove unknown binding: 66,1,1/4:3732917542/3732917544 [ 375.641528][T11223] tipc: Failed to remove unknown binding: 66,1,1/4:3732917542/3732917544 [ 377.172724][T11250] netlink: 'syz.2.2407': attribute type 4 has an invalid length. [ 377.212040][T11250] netlink: 'syz.2.2407': attribute type 4 has an invalid length. [ 377.327433][T11253] binder: 11252:11253 ioctl c0306201 2000000001c0 returned -14 [ 377.525579][T11260] overlayfs: failed to resolve './file0': -2 [ 377.573839][T11261] tipc: Failed to remove unknown binding: 66,1,1/1064273961:293507079/293507081 [ 377.608282][T11261] tipc: Failed to remove unknown binding: 66,1,1/1064273961:293507079/293507081 [ 377.624941][T11261] tipc: Failed to remove unknown binding: 66,1,1/1064273961:293507079/293507081 [ 377.792671][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 378.193797][T11282] binder: 11281:11282 ioctl c0306201 0 returned -14 [ 378.386510][T11286] binder: 11285:11286 ioctl c0306201 2000000001c0 returned -14 [ 378.647716][T11292] 9p: Could not find request transport: 0xffffffffffffffff [ 384.473590][T11392] tipc: New replicast peer: 0.0.0.0 [ 384.495659][T11392] tipc: Enabled bearer , priority 10 [ 386.123631][T11430] netlink: 'syz.4.2495': attribute type 4 has an invalid length. [ 386.185066][T11432] netlink: 'syz.4.2495': attribute type 4 has an invalid length. [ 387.344580][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.351833][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.445278][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 387.968595][T11467] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2515'. [ 388.812386][T11477] binder: 11476:11477 ioctl c0306201 0 returned -14 [ 390.445640][T11503] binder: 11502:11503 ioctl c0306201 0 returned -14 [ 390.851554][T11511] binder: 11510:11511 ioctl c0306201 2000000001c0 returned -14 [ 391.173232][T11513] 9p: Could not find request transport: 0xffffffffffffffff [ 391.473894][T11518] tipc: Failed to remove unknown binding: 66,1,1/1064273961:4054498515/4054498517 [ 395.267176][T11567] 9p: Could not find request transport: 0xffffffffffffffff [ 395.283672][T11570] tipc: Enabled bearer , priority 0 [ 395.354736][T11570] tipc: Disabling bearer [ 397.485431][T11597] tipc: New replicast peer: 0.0.0.0 [ 397.491614][T11597] tipc: Enabled bearer , priority 10 [ 398.642849][ T24] tipc: Node number set to 138602228 [ 398.952013][T11623] tipc: Enabled bearer , priority 0 [ 399.194470][T11623] tipc: Disabling bearer [ 399.393947][T11631] tipc: New replicast peer: 0.0.0.0 [ 399.536931][T11631] tipc: Enabled bearer , priority 10 [ 400.471944][T11665] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2602'. [ 404.471764][T11760] syz.4.2648 uses obsolete (PF_INET,SOCK_PACKET) [ 405.162801][T11778] netlink: 'syz.0.2653': attribute type 4 has an invalid length. [ 405.196043][T11778] netlink: 'syz.0.2653': attribute type 4 has an invalid length. [ 407.965964][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.975610][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.990014][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.001780][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.011736][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.061072][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.159081][T11866] chnl_net:caif_netlink_parms(): no params data found [ 409.345633][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.554278][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.725215][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.891327][T11866] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.913187][T11866] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.921118][T11866] bridge_slave_0: entered allmulticast mode [ 409.944325][T11866] bridge_slave_0: entered promiscuous mode [ 409.966859][T11866] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.988228][T11866] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.023270][T11866] bridge_slave_1: entered allmulticast mode [ 410.031344][T11866] bridge_slave_1: entered promiscuous mode [ 410.062261][ T5842] Bluetooth: hci5: command tx timeout [ 410.271555][T11866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.326611][T11866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.598913][T11866] team0: Port device team_slave_0 added [ 410.628063][T11866] team0: Port device team_slave_1 added [ 410.947013][T11866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.977460][T11866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.072512][T11866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.093634][ T36] bridge_slave_1: left allmulticast mode [ 411.105661][ T36] bridge_slave_1: left promiscuous mode [ 411.133387][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.237228][ T36] bridge_slave_0: left allmulticast mode [ 411.257733][ T36] bridge_slave_0: left promiscuous mode [ 411.308281][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.155785][ T5842] Bluetooth: hci5: command tx timeout [ 412.330432][T11977] netlink: 'syz.2.2737': attribute type 4 has an invalid length. [ 412.381805][T11978] netlink: 'syz.2.2737': attribute type 4 has an invalid length. [ 412.622032][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.654411][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.679360][ T36] bond0 (unregistering): Released all slaves [ 412.719126][T11866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.734534][T11866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.812061][T11866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.867288][ T36] tipc: Disabling bearer [ 412.875313][ T36] tipc: Left network mode [ 413.201028][T11866] hsr_slave_0: entered promiscuous mode [ 413.225220][T11866] hsr_slave_1: entered promiscuous mode [ 413.244224][T11866] debugfs: 'hsr0' already exists in 'hsr' [ 413.262978][T11866] Cannot create hsr debugfs directory [ 413.395387][T11999] netlink: 'syz.2.2748': attribute type 4 has an invalid length. [ 413.447154][T12002] netlink: 'syz.2.2748': attribute type 4 has an invalid length. [ 413.801186][ T36] hsr_slave_0: left promiscuous mode [ 413.822928][ T36] hsr_slave_1: left promiscuous mode [ 413.833930][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.880577][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.903757][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.931700][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.065019][ T36] veth1_macvtap: left promiscuous mode [ 414.092529][ T36] veth0_macvtap: left promiscuous mode [ 414.123074][ T36] veth1_vlan: left promiscuous mode [ 414.128745][ T36] veth0_vlan: left promiscuous mode [ 414.225855][ T5842] Bluetooth: hci5: command tx timeout [ 415.800772][ T36] team0 (unregistering): Port device team_slave_1 removed [ 415.901847][ T36] team0 (unregistering): Port device team_slave_0 removed [ 416.304435][ T5842] Bluetooth: hci5: command tx timeout [ 419.260873][T11866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.336467][T11866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.396645][T11866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.437801][T11866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.915951][T11866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.998200][T11866] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.046532][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.053817][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.124105][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.131381][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.998041][T11866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.044453][T11866] veth0_vlan: entered promiscuous mode [ 422.114700][T11866] veth1_vlan: entered promiscuous mode [ 422.288066][T11866] veth0_macvtap: entered promiscuous mode [ 422.339949][T11866] veth1_macvtap: entered promiscuous mode [ 422.420788][T11866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.513723][T11866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.585950][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.615774][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.652737][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.743024][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.129630][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'. [ 423.151689][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.175637][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.302512][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.310398][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.247140][T12225] netlink: 'syz.2.2815': attribute type 4 has an invalid length. [ 425.295965][T12229] netlink: 'syz.2.2815': attribute type 4 has an invalid length. [ 426.387010][T12257] netlink: 'syz.3.2831': attribute type 4 has an invalid length. [ 426.439195][T12257] netlink: 'syz.3.2831': attribute type 4 has an invalid length. [ 429.551522][T12351] binder: 12350:12351 ioctl c0306201 2000000001c0 returned -14 [ 429.974633][T12363] netlink: 'syz.4.2882': attribute type 4 has an invalid length. [ 430.015388][T12363] netlink: 'syz.4.2882': attribute type 4 has an invalid length. [ 430.569613][T12374] binder: 12372:12374 ioctl c0306201 2000000001c0 returned -14 [ 430.727257][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 430.737653][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 430.745996][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.758721][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.767286][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.389097][T12375] chnl_net:caif_netlink_parms(): no params data found [ 432.012244][T12375] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.030418][T12375] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.037777][T12375] bridge_slave_0: entered allmulticast mode [ 432.062412][T12375] bridge_slave_0: entered promiscuous mode [ 432.102263][T12375] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.131412][T12375] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.138740][T12375] bridge_slave_1: entered allmulticast mode [ 432.172105][T12375] bridge_slave_1: entered promiscuous mode [ 432.427467][T12375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.485646][T12375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.797384][T12375] team0: Port device team_slave_0 added [ 432.861181][ T5842] Bluetooth: hci4: command tx timeout [ 432.988185][T12375] team0: Port device team_slave_1 added [ 433.068611][T12418] binder: 12417:12418 ioctl c0306201 2000000001c0 returned -14 [ 433.436847][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.493627][T12375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.513067][T12375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.589884][T12375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.624818][T12375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.642406][T12375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.719774][T12375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.901728][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.161051][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.304227][T12375] hsr_slave_0: entered promiscuous mode [ 434.330848][T12375] hsr_slave_1: entered promiscuous mode [ 434.337527][T12375] debugfs: 'hsr0' already exists in 'hsr' [ 434.359914][T12375] Cannot create hsr debugfs directory [ 434.403439][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.919981][ T12] bridge_slave_1: left allmulticast mode [ 434.926018][ T12] bridge_slave_1: left promiscuous mode [ 434.940008][ T5842] Bluetooth: hci4: command tx timeout [ 434.950749][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.004363][ T12] bridge_slave_0: left allmulticast mode [ 435.029265][ T12] bridge_slave_0: left promiscuous mode [ 435.049851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.803527][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.824606][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.861092][ T12] bond0 (unregistering): Released all slaves [ 436.011431][ T12] tipc: Disabling bearer [ 436.019345][ T12] tipc: Left network mode [ 436.838742][ T12] hsr_slave_0: left promiscuous mode [ 436.875845][ T12] hsr_slave_1: left promiscuous mode [ 436.896519][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.933774][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.958961][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.991643][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.018664][ T5842] Bluetooth: hci4: command tx timeout [ 437.131433][ T12] veth1_macvtap: left promiscuous mode [ 437.159830][ T12] veth0_macvtap: left promiscuous mode [ 437.165614][ T12] veth1_vlan: left promiscuous mode [ 437.194700][ T12] veth0_vlan: left promiscuous mode [ 437.337841][T12459] 9p: Could not find request transport: 0xffffffffffffffff [ 438.353299][T12495] 9p: Could not find request transport: 0xffffffffffffffff [ 438.615027][ T12] team0 (unregistering): Port device team_slave_1 removed [ 438.773092][ T12] team0 (unregistering): Port device team_slave_0 removed [ 439.117748][ T5842] Bluetooth: hci4: command tx timeout [ 440.629207][T12375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.702692][T12375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.772471][T12375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.831389][T12375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.232587][T12375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.354252][T12533] 9p: Could not find request transport: 0xffffffffffffffff [ 441.373242][T12375] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.456810][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.464045][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.508503][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.515839][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.675398][T12375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.222142][T12375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.452795][T12375] veth0_vlan: entered promiscuous mode [ 442.513223][T12375] veth1_vlan: entered promiscuous mode [ 442.647575][T12375] veth0_macvtap: entered promiscuous mode [ 442.683223][T12375] veth1_macvtap: entered promiscuous mode [ 442.770194][T12375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.812317][T12375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.870276][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.908540][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.955551][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.975751][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.220156][T12569] 9p: Could not find request transport: 0xffffffffffffffff [ 443.257562][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.275716][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.366156][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.374694][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.446767][T12578] netlink: 'syz.0.2960': attribute type 4 has an invalid length. [ 443.489332][T12578] netlink: 'syz.0.2960': attribute type 4 has an invalid length. [ 444.240403][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.250188][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.258841][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.268500][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.279752][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.238381][T12598] chnl_net:caif_netlink_parms(): no params data found [ 446.041896][T12598] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.075287][T12598] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.082692][T12598] bridge_slave_0: entered allmulticast mode [ 446.106359][T12598] bridge_slave_0: entered promiscuous mode [ 446.305633][T12598] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.331784][T12598] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.345079][T12598] bridge_slave_1: entered allmulticast mode [ 446.364482][T12598] bridge_slave_1: entered promiscuous mode [ 446.385138][ T5146] Bluetooth: hci2: command tx timeout [ 446.868368][T12598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.918951][T12598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.071050][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.548793][T12690] netlink: 'syz.1.3000': attribute type 4 has an invalid length. [ 447.564029][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.613416][T12695] netlink: 'syz.1.3000': attribute type 4 has an invalid length. [ 447.740802][T12598] team0: Port device team_slave_0 added [ 447.782575][T12598] team0: Port device team_slave_1 added [ 448.117431][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.180929][T12598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.204257][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.276592][T12598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.290966][T12598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.300241][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.354731][T12598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.454925][ T5146] Bluetooth: hci2: command tx timeout [ 448.487335][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.785969][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.792501][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.803752][T12706] tipc: Enabling of bearer rejected, already enabled [ 449.055893][T12598] hsr_slave_0: entered promiscuous mode [ 449.088662][T12598] hsr_slave_1: entered promiscuous mode [ 449.114744][T12598] debugfs: 'hsr0' already exists in 'hsr' [ 449.121363][T12598] Cannot create hsr debugfs directory [ 449.906173][ T36] bridge_slave_1: left allmulticast mode [ 449.933496][ T36] bridge_slave_1: left promiscuous mode [ 449.939464][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.076858][ T36] bridge_slave_0: left allmulticast mode [ 450.082579][ T36] bridge_slave_0: left promiscuous mode [ 450.093421][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.555000][ T5146] Bluetooth: hci2: command tx timeout [ 452.085577][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.129263][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.184669][ T36] bond0 (unregistering): Released all slaves [ 452.615107][ T5146] Bluetooth: hci2: command tx timeout [ 452.639958][ T36] tipc: Disabling bearer [ 452.656350][ T36] tipc: Left network mode [ 454.147212][ T36] hsr_slave_0: left promiscuous mode [ 454.181472][ T36] hsr_slave_1: left promiscuous mode [ 454.187778][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.221457][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.262487][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.270209][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.363028][ T36] veth1_macvtap: left promiscuous mode [ 454.368732][ T36] veth0_macvtap: left promiscuous mode [ 454.401526][ T36] veth1_vlan: left promiscuous mode [ 454.406953][ T36] veth0_vlan: left promiscuous mode [ 456.581237][ T36] team0 (unregistering): Port device team_slave_1 removed [ 456.760987][ T36] team0 (unregistering): Port device team_slave_0 removed [ 459.237628][T12598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.336001][T12598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 459.423121][T12598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.523661][T12598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.987916][T12598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.074792][T12598] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.127930][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.135232][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.237630][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.244925][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.185090][T12598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.384602][T12598] veth0_vlan: entered promiscuous mode [ 461.452122][T12598] veth1_vlan: entered promiscuous mode [ 461.603565][T12598] veth0_macvtap: entered promiscuous mode [ 461.659526][T12598] veth1_macvtap: entered promiscuous mode [ 461.701979][T12598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.782644][T12598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.824463][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.862648][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.913534][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.948151][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.197889][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.206149][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.353375][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.377539][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.761307][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'. [ 463.258881][T12903] netlink: 'syz.2.3062': attribute type 4 has an invalid length. [ 463.298774][T12903] netlink: 'syz.2.3062': attribute type 4 has an invalid length. [ 464.013012][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 465.181439][T12947] netlink: 'syz.1.3083': attribute type 4 has an invalid length. [ 465.216312][T12947] netlink: 'syz.1.3083': attribute type 4 has an invalid length. [ 466.588097][T12970] binder: 12969:12970 ioctl c0306201 0 returned -14 [ 467.550590][T12977] 9p: Could not find request transport: 0xffffffffffffffff [ 468.178484][T12991] netlink: 'syz.4.3101': attribute type 4 has an invalid length. [ 468.195249][T12991] netlink: 'syz.4.3101': attribute type 4 has an invalid length. [ 468.426742][T12995] binder: 12994:12995 ioctl c0306201 0 returned -14 [ 468.909304][T13003] 9p: Could not find request transport: 0xffffffffffffffff [ 469.317243][T13012] tipc: Started in network mode [ 469.333425][T13012] tipc: Node identity c61d12178826, cluster identity 4711 [ 469.354392][T13012] tipc: Enabled bearer , priority 0 [ 469.485914][T13012] tipc: Disabling bearer [ 469.836460][T13029] 9p: Could not find request transport: 0xffffffffffffffff [ 470.465697][T13056] binder: 13055:13056 ioctl c0306201 0 returned -14 [ 470.500583][T13054] netlink: 'syz.1.3130': attribute type 4 has an invalid length. [ 470.552044][T13054] netlink: 'syz.1.3130': attribute type 4 has an invalid length. [ 470.565829][T13060] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 470.613750][T13060] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 472.870097][T13145] netlink: 'syz.3.3171': attribute type 4 has an invalid length. [ 472.921502][T13148] netlink: 'syz.3.3171': attribute type 4 has an invalid length. [ 473.382971][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.395795][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.404345][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.413252][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.422637][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.820086][T13154] chnl_net:caif_netlink_parms(): no params data found [ 474.393548][T13154] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.400768][T13154] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.432973][T13154] bridge_slave_0: entered allmulticast mode [ 474.459555][T13154] bridge_slave_0: entered promiscuous mode [ 474.572483][T13154] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.579700][T13154] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.617694][T13154] bridge_slave_1: entered allmulticast mode [ 474.641930][T13154] bridge_slave_1: entered promiscuous mode [ 474.777235][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.025885][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.085873][T13154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.123305][T13154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.263705][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.473615][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.484450][ T5842] Bluetooth: hci3: command tx timeout [ 475.604869][T13154] team0: Port device team_slave_0 added [ 475.643725][T13154] team0: Port device team_slave_1 added [ 475.758926][T13154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.776269][T13154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.835304][T13154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.863368][T13154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.882635][T13154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.944261][T13154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.149757][T13154] hsr_slave_0: entered promiscuous mode [ 476.167612][T13154] hsr_slave_1: entered promiscuous mode [ 476.186505][T13154] debugfs: 'hsr0' already exists in 'hsr' [ 476.196490][T13154] Cannot create hsr debugfs directory [ 476.274739][T13173] netlink: 'syz.0.3181': attribute type 4 has an invalid length. [ 476.326758][T13174] netlink: 'syz.0.3181': attribute type 4 has an invalid length. [ 476.602204][ T50] bridge_slave_1: left allmulticast mode [ 476.607912][ T50] bridge_slave_1: left promiscuous mode [ 476.636612][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.711494][ T50] bridge_slave_0: left allmulticast mode [ 476.737848][ T50] bridge_slave_0: left promiscuous mode [ 476.755059][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.560237][ T5842] Bluetooth: hci3: command tx timeout [ 477.933331][T13202] netlink: 'syz.3.3187': attribute type 4 has an invalid length. [ 477.984251][T13204] netlink: 'syz.3.3187': attribute type 4 has an invalid length. [ 477.997789][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.020711][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.042422][ T50] bond0 (unregistering): Released all slaves [ 478.233623][ T50] tipc: Disabling bearer [ 478.247829][ T50] tipc: Left network mode [ 479.207154][T13233] process 'syz.0.3198' launched './file0' with NULL argv: empty string added [ 479.441957][ T50] hsr_slave_0: left promiscuous mode [ 479.452627][ T50] hsr_slave_1: left promiscuous mode [ 479.458973][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.494448][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.563440][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.599300][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.639297][ T5842] Bluetooth: hci3: command tx timeout [ 479.686276][ T50] veth1_macvtap: left promiscuous mode [ 479.691995][ T50] veth0_macvtap: left promiscuous mode [ 479.698374][ T50] veth1_vlan: left promiscuous mode [ 479.704390][ T50] veth0_vlan: left promiscuous mode [ 480.681572][ T50] team0 (unregistering): Port device team_slave_1 removed [ 480.782310][ T50] team0 (unregistering): Port device team_slave_0 removed [ 481.718983][ T5842] Bluetooth: hci3: command tx timeout [ 481.847578][T13263] netlink: 'syz.0.3211': attribute type 4 has an invalid length. [ 481.899302][T13264] netlink: 'syz.0.3211': attribute type 4 has an invalid length. [ 482.330202][T13154] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.421569][T13154] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.465057][T13154] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.525160][T13154] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.904323][T13154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.990536][T13154] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.015749][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.023032][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.074573][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.081934][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.735807][T13315] netlink: 'syz.4.3210': attribute type 4 has an invalid length. [ 483.802702][T13317] netlink: 'syz.4.3210': attribute type 4 has an invalid length. [ 483.932631][T13154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.133930][T13154] veth0_vlan: entered promiscuous mode [ 484.191100][T13154] veth1_vlan: entered promiscuous mode [ 484.375392][T13154] veth0_macvtap: entered promiscuous mode [ 484.387047][ T30] audit: type=1326 audit(1763075124.205:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.1.3226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f503bb8f6c9 code=0x0 [ 484.449026][T13154] veth1_macvtap: entered promiscuous mode [ 484.502721][T13154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.535109][T13154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.583541][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.649472][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.680072][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.732186][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.018481][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.026360][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.190776][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.217931][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.243172][T13348] netlink: 'syz.1.3231': attribute type 4 has an invalid length. [ 485.264698][T13348] netlink: 'syz.1.3231': attribute type 4 has an invalid length. [ 486.057863][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 486.071081][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 486.080050][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 486.088672][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 486.097995][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.738267][T13379] tipc: Enabled bearer , priority 0 [ 486.790446][T13379] tipc: Disabling bearer [ 487.118928][ T30] audit: type=1326 audit(1763075126.946:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.3.3237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf4018f6c9 code=0x0 [ 487.312645][T13366] chnl_net:caif_netlink_parms(): no params data found [ 487.390828][T13396] netlink: 'syz.0.3242': attribute type 4 has an invalid length. [ 487.435035][T13396] netlink: 'syz.0.3242': attribute type 4 has an invalid length. [ 487.817489][T13366] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.835421][T13366] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.842777][T13366] bridge_slave_0: entered allmulticast mode [ 487.877602][T13366] bridge_slave_0: entered promiscuous mode [ 487.916188][T13366] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.923506][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.951495][T13413] netlink: 'syz.0.3251': attribute type 4 has an invalid length. [ 487.956191][T13366] bridge_slave_1: entered allmulticast mode [ 487.981185][T13366] bridge_slave_1: entered promiscuous mode [ 488.004798][T13411] tipc: Enabling of bearer rejected, failed to enable media [ 488.005715][T13416] netlink: 'syz.0.3251': attribute type 4 has an invalid length. [ 488.190777][T13366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.205322][ T5842] Bluetooth: hci0: command tx timeout [ 488.238308][T13366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.550468][T13366] team0: Port device team_slave_0 added [ 488.560118][T13366] team0: Port device team_slave_1 added [ 488.789647][ T4398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.851238][T13366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.874657][T13366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.954096][T13366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.986928][T13366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.000335][T13366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.031116][T13366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.150912][ T4398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.339293][ T4398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.377535][T13366] hsr_slave_0: entered promiscuous mode [ 489.396355][T13366] hsr_slave_1: entered promiscuous mode [ 489.403005][T13366] debugfs: 'hsr0' already exists in 'hsr' [ 489.434345][T13366] Cannot create hsr debugfs directory [ 489.467866][ T4398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.923478][ T4398] bridge_slave_1: left allmulticast mode [ 489.929724][ T4398] bridge_slave_1: left promiscuous mode [ 489.944599][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.958296][ T4398] bridge_slave_0: left allmulticast mode [ 489.974075][ T4398] bridge_slave_0: left promiscuous mode [ 489.981145][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.276641][ T5842] Bluetooth: hci0: command tx timeout [ 490.620995][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.641557][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.662580][ T4398] bond0 (unregistering): Released all slaves [ 490.767467][T13461] tipc: Started in network mode [ 490.772407][T13461] tipc: Node identity ac14142f, cluster identity 4711 [ 490.796114][T13461] tipc: New replicast peer: 0.0.0.0 [ 490.802309][T13461] tipc: Enabled bearer , priority 10 [ 490.895646][ T4398] tipc: Disabling bearer [ 490.913986][ T4398] tipc: Left network mode [ 491.194770][ T30] audit: type=1326 audit(1763075131.028:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.4.3280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe17078f6c9 code=0x0 [ 491.519526][ T4398] hsr_slave_0: left promiscuous mode [ 491.560039][ T4398] hsr_slave_1: left promiscuous mode [ 491.584184][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.622473][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.672534][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.680320][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.787778][ T4398] veth1_macvtap: left promiscuous mode [ 491.813279][ T4398] veth0_macvtap: left promiscuous mode [ 491.819127][ T4398] veth1_vlan: left promiscuous mode [ 491.844500][ T4398] veth0_vlan: left promiscuous mode [ 492.355861][ T5842] Bluetooth: hci0: command tx timeout [ 493.455851][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 493.578462][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 494.432236][ T5842] Bluetooth: hci0: command tx timeout [ 494.775515][T11867] tipc: Node number set to 2886997039 [ 495.089637][T13366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.172137][T13366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.220713][T13366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.258748][T13366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.758073][T13366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.838231][T13366] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.890542][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.897820][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.955812][T12454] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.963169][T12454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.678802][T13366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.828145][T13366] veth0_vlan: entered promiscuous mode [ 496.880392][T13366] veth1_vlan: entered promiscuous mode [ 496.970822][T13366] veth0_macvtap: entered promiscuous mode [ 496.999101][T13366] veth1_macvtap: entered promiscuous mode [ 497.043112][T13366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.088853][T13366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.129445][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.149257][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.174463][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.207055][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.442953][T12454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.462660][T12454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.533916][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.547817][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.425815][T13573] overlayfs: failed to resolve './bus': -2 [ 498.658327][T13575] tipc: Enabling of bearer rejected, failed to enable media [ 499.972740][T13595] can0: slcan on ttyS3. [ 500.060451][T13595] can0 (unregistered): slcan off ttyS3. [ 500.066655][T13595] Falling back ldisc for ttyS3. [ 500.280999][T13606] tipc: Enabling of bearer rejected, failed to enable media [ 501.625781][T13639] tipc: Enabling of bearer rejected, failed to enable media [ 506.628140][T13731] tap0: tun_chr_ioctl cmd 1074025676 [ 506.642538][T13731] tap0: owner set to 0 [ 510.190648][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.204245][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.288441][T13853] overlayfs: failed to resolve './file0': -2 [ 516.051947][T13892] overlayfs: failed to resolve './file1': -2 [ 516.889863][T13920] overlayfs: failed to resolve './file1': -2 [ 517.789509][T13950] overlayfs: failed to resolve './file1': -2 [ 520.360765][T13993] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3494'. [ 520.573773][T13997] netlink: 'syz.4.3495': attribute type 4 has an invalid length. [ 520.623812][T13997] netlink: 'syz.4.3495': attribute type 4 has an invalid length. [ 521.074791][T14007] netlink: 'syz.4.3500': attribute type 4 has an invalid length. [ 521.125609][T14007] netlink: 'syz.4.3500': attribute type 4 has an invalid length. [ 521.830651][T14026] binder: 14025:14026 ioctl 40046629 0 returned -22 [ 522.230098][T14040] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3514'. [ 523.503365][T14076] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3531'. [ 525.544734][T14124] tipc: Enabling of bearer rejected, failed to enable media [ 525.713499][T14126] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] SMP KASAN PTI [ 525.725538][T14126] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 525.734098][T14126] CPU: 1 UID: 0 PID: 14126 Comm: syz.2.3557 Not tainted syzkaller #0 PREEMPT(full) [ 525.744332][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.754927][T14126] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 525.760274][T14126] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 c9 67 6a 00 4d 8b 3e 31 ff 4c [ 525.780244][T14126] RSP: 0018:ffffc9000411fcd0 EFLAGS: 00010206 [ 525.786965][T14126] RAX: ffffffff81bde646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 525.795125][T14126] RDX: ffffc9000b1f7000 RSI: 0000000000000053 RDI: 0000000000000054 [ 525.803297][T14126] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 525.811299][T14126] R10: dffffc0000000000 R11: fffff52000823f78 R12: dffffc0000000000 [ 525.819294][T14126] R13: 0000000000000017 R14: 00000000000000ba R15: ffff88807c39448c [ 525.827286][T14126] FS: 00007f13a10606c0(0000) GS:ffff888125fc1000(0000) knlGS:0000000000000000 [ 525.836316][T14126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.843266][T14126] CR2: 00000000000000da CR3: 0000000069582000 CR4: 00000000003526f0 [ 525.851276][T14126] Call Trace: [ 525.854566][T14126] [ 525.857525][T14126] nsproxy_free+0x20f/0x7c0 [ 525.862061][T14126] create_new_namespaces+0x47a/0x540 [ 525.867716][T14126] unshare_nsproxy_namespaces+0x11c/0x170 [ 525.873495][T14126] ksys_unshare+0x4c8/0x8c0 [ 525.878107][T14126] ? __pfx_ksys_unshare+0x10/0x10 [ 525.883163][T14126] ? __pfx___se_sys_futex+0x10/0x10 [ 525.888493][T14126] __x64_sys_unshare+0x38/0x50 [ 525.893482][T14126] do_syscall_64+0xfa/0xfa0 [ 525.898026][T14126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.904126][T14126] ? clear_bhb_loop+0x60/0xb0 [ 525.908829][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.914899][T14126] RIP: 0033:0x7f13a018f6c9 [ 525.919357][T14126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.940029][T14126] RSP: 002b:00007f13a1060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 525.948653][T14126] RAX: ffffffffffffffda RBX: 00007f13a03e5fa0 RCX: 00007f13a018f6c9 [ 525.956649][T14126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 525.964786][T14126] RBP: 00007f13a0211f91 R08: 0000000000000000 R09: 0000000000000000 [ 525.972768][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.980758][T14126] R13: 00007f13a03e6038 R14: 00007f13a03e5fa0 R15: 00007ffe8873b438 [ 525.988839][T14126] [ 525.991876][T14126] Modules linked in: [ 525.996906][T14126] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 526.036172][T14126] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 526.061700][T14126] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 c9 67 6a 00 4d 8b 3e 31 ff 4c [ 526.146211][T14126] RSP: 0018:ffffc9000411fcd0 EFLAGS: 00010206 [ 526.174618][T14126] RAX: ffffffff81bde646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 526.218186][T14126] RDX: ffffc9000b1f7000 RSI: 0000000000000053 RDI: 0000000000000054 [ 526.267255][T14126] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 526.275309][T14126] R10: dffffc0000000000 R11: fffff52000823f78 R12: dffffc0000000000 [ 526.295936][T14126] R13: 0000000000000017 R14: 00000000000000ba R15: ffff88807c39448c [ 526.304130][T14126] FS: 00007f13a10606c0(0000) GS:ffff888125ec1000(0000) knlGS:0000000000000000 [ 526.353766][T14126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.365877][T14126] CR2: 000055eb4923b608 CR3: 0000000069582000 CR4: 00000000003526f0 [ 526.373914][T14126] Kernel panic - not syncing: Fatal exception [ 526.380359][T14126] Kernel Offset: disabled [ 526.384689][T14126] Rebooting in 86400 seconds..