last executing test programs: 644.924636ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) 519.775904ms ago: executing program 3 (id=5): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='@\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) fcntl$setownex(r2, 0xf, &(0x7f00000002c0)={0x2}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_DESTROY(r4, 0x0, 0x0) 257.588286ms ago: executing program 3 (id=6): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1, 0x0, 0x6}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x0, 0x3, 0x1}, 0x20) 188.474945ms ago: executing program 1 (id=2): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 129.360811ms ago: executing program 3 (id=7): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="64000000190001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 0s ago: executing program 1 (id=8): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) unshare(0x22020600) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 67.505546][ T5809] cgroup: Unknown subsys name 'net' [ 67.699866][ T5809] cgroup: Unknown subsys name 'cpuset' [ 67.709132][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.101731][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.401977][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.412516][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.420453][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.428285][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.437837][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.438290][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.445710][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.453260][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.461411][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.467604][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.481068][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481188][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.489739][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.506844][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.510593][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.515306][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.523180][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.529576][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.535009][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.542585][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.565371][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.573248][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.041802][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 72.160514][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 72.224457][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 72.283325][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.292054][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.300188][ T5818] bridge_slave_0: entered allmulticast mode [ 72.308323][ T5818] bridge_slave_0: entered promiscuous mode [ 72.328923][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.336082][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.343656][ T5818] bridge_slave_1: entered allmulticast mode [ 72.350874][ T5818] bridge_slave_1: entered promiscuous mode [ 72.430912][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 72.444552][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.485161][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.572817][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.580097][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.587377][ T5820] bridge_slave_0: entered allmulticast mode [ 72.594406][ T5820] bridge_slave_0: entered promiscuous mode [ 72.604561][ T5818] team0: Port device team_slave_0 added [ 72.613664][ T5818] team0: Port device team_slave_1 added [ 72.620339][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.627660][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.634827][ T5821] bridge_slave_0: entered allmulticast mode [ 72.642090][ T5821] bridge_slave_0: entered promiscuous mode [ 72.653935][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.661261][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.668806][ T5820] bridge_slave_1: entered allmulticast mode [ 72.675763][ T5820] bridge_slave_1: entered promiscuous mode [ 72.697687][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.704925][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.712292][ T5821] bridge_slave_1: entered allmulticast mode [ 72.719679][ T5821] bridge_slave_1: entered promiscuous mode [ 72.783540][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.791234][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.817155][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.853799][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.874736][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.881848][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.908530][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.922628][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.935267][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.955298][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.962511][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.969859][ T5819] bridge_slave_0: entered allmulticast mode [ 72.976963][ T5819] bridge_slave_0: entered promiscuous mode [ 72.995959][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.016268][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.023602][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.030870][ T5819] bridge_slave_1: entered allmulticast mode [ 73.038026][ T5819] bridge_slave_1: entered promiscuous mode [ 73.072902][ T5820] team0: Port device team_slave_0 added [ 73.115016][ T5820] team0: Port device team_slave_1 added [ 73.135163][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.153482][ T5818] hsr_slave_0: entered promiscuous mode [ 73.160367][ T5818] hsr_slave_1: entered promiscuous mode [ 73.168835][ T5821] team0: Port device team_slave_0 added [ 73.187840][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.214545][ T5821] team0: Port device team_slave_1 added [ 73.270230][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.277632][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.303785][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.317207][ T5819] team0: Port device team_slave_0 added [ 73.342078][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.349184][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.375302][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.395946][ T5819] team0: Port device team_slave_1 added [ 73.413517][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.420688][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.446895][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.478315][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.485282][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.511402][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.547000][ T5828] Bluetooth: hci3: command tx timeout [ 73.584266][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.591603][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.617583][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.627544][ T5828] Bluetooth: hci0: command tx timeout [ 73.628351][ T5825] Bluetooth: hci1: command tx timeout [ 73.633719][ T5828] Bluetooth: hci2: command tx timeout [ 73.642346][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.652109][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.678126][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.708982][ T5820] hsr_slave_0: entered promiscuous mode [ 73.715269][ T5820] hsr_slave_1: entered promiscuous mode [ 73.721730][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 73.727590][ T5820] Cannot create hsr debugfs directory [ 73.763837][ T5821] hsr_slave_0: entered promiscuous mode [ 73.770619][ T5821] hsr_slave_1: entered promiscuous mode [ 73.777736][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 73.783475][ T5821] Cannot create hsr debugfs directory [ 73.864443][ T5819] hsr_slave_0: entered promiscuous mode [ 73.870885][ T5819] hsr_slave_1: entered promiscuous mode [ 73.877257][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 73.882997][ T5819] Cannot create hsr debugfs directory [ 74.238030][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.251093][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.261255][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.281299][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.358894][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.370598][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.387309][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.410899][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.491249][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.501600][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.513151][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.524599][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.567620][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.623870][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.636296][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.648583][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.661852][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.684669][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.721939][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.729275][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.740130][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.747276][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.881173][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.945075][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.995860][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.003089][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.018468][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.032453][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.039655][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.081398][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.097663][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.140168][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.147386][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.182390][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.189546][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.201030][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.223390][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.230578][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.256168][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.263323][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.296621][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.493907][ T5818] veth0_vlan: entered promiscuous mode [ 75.532817][ T5818] veth1_vlan: entered promiscuous mode [ 75.630627][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.641777][ T5828] Bluetooth: hci3: command tx timeout [ 75.667598][ T5818] veth0_macvtap: entered promiscuous mode [ 75.706823][ T5828] Bluetooth: hci2: command tx timeout [ 75.707294][ T5146] Bluetooth: hci0: command tx timeout [ 75.719239][ T5825] Bluetooth: hci1: command tx timeout [ 75.732147][ T5818] veth1_macvtap: entered promiscuous mode [ 75.792084][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.820888][ T5821] veth0_vlan: entered promiscuous mode [ 75.839656][ T5821] veth1_vlan: entered promiscuous mode [ 75.853173][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.870384][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.885299][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.901291][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.910899][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.932713][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.950615][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.032324][ T5821] veth0_macvtap: entered promiscuous mode [ 76.057900][ T5821] veth1_macvtap: entered promiscuous mode [ 76.093428][ T5820] veth0_vlan: entered promiscuous mode [ 76.123681][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.138286][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.171839][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.180434][ T5820] veth1_vlan: entered promiscuous mode [ 76.198701][ T5819] veth0_vlan: entered promiscuous mode [ 76.210907][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.225870][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.238939][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.249170][ T3555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.259298][ T3555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.272477][ T5819] veth1_vlan: entered promiscuous mode [ 76.290283][ T3555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.319465][ T3555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.348278][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.350359][ T5820] veth0_macvtap: entered promiscuous mode [ 76.391737][ T5820] veth1_macvtap: entered promiscuous mode [ 76.440229][ T5819] veth0_macvtap: entered promiscuous mode [ 76.470633][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.494104][ T5819] veth1_macvtap: entered promiscuous mode [ 76.522780][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.560644][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.575052][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.602110][ T3555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.633474][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.648780][ T3555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.658471][ T3555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.691395][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.699537][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.704414][ T3555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.721727][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.737910][ T5912] evm: overlay not supported [ 76.742627][ T30] audit: type=1800 audit(1763062358.361:2): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5" name="cpuacct.usage_percpu" dev="overlay" ino=32 res=0 errno=0 [ 76.791029][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.810869][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.832796][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.841935][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.035683][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.046907][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.128269][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.136119][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.172825][ T5921] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] SMP KASAN PTI [ 77.184751][ T5921] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 77.193201][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 77.202236][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.212302][ T5921] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 77.217351][ T5921] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 77.236963][ T5921] RSP: 0018:ffffc90005207cd0 EFLAGS: 00010206 [ 77.243042][ T5921] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 77.251026][ T5921] RDX: ffffc900046a2000 RSI: 0000000000000053 RDI: 0000000000000054 [ 77.259008][ T5921] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 77.266987][ T5921] R10: dffffc0000000000 R11: fffff52000a40f78 R12: dffffc0000000000 [ 77.274996][ T5921] R13: 0000000000000017 R14: 00000000000000ba R15: ffff88802945048c [ 77.282975][ T5921] FS: 00007f91426a66c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 77.291895][ T5921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.298466][ T5921] CR2: 000000110c2dbe3b CR3: 00000000338dc000 CR4: 00000000003526f0 [ 77.306429][ T5921] Call Trace: [ 77.309710][ T5921] [ 77.312629][ T5921] nsproxy_free+0x20f/0x7c0 [ 77.317120][ T5921] create_new_namespaces+0x47a/0x540 [ 77.322393][ T5921] unshare_nsproxy_namespaces+0x11c/0x170 [ 77.328096][ T5921] ksys_unshare+0x4c8/0x8c0 [ 77.332588][ T5921] ? __pfx_ksys_unshare+0x10/0x10 [ 77.337601][ T5921] __x64_sys_unshare+0x38/0x50 [ 77.342353][ T5921] do_syscall_64+0xfa/0xfa0 [ 77.346840][ T5921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.352894][ T5921] ? clear_bhb_loop+0x60/0xb0 [ 77.357557][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.363438][ T5921] RIP: 0033:0x7f914178f6c9 [ 77.367848][ T5921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.387439][ T5921] RSP: 002b:00007f91426a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.395841][ T5921] RAX: ffffffffffffffda RBX: 00007f91419e5fa0 RCX: 00007f914178f6c9 [ 77.403798][ T5921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 77.411755][ T5921] RBP: 00007f9141811f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.419716][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.427673][ T5921] R13: 00007f91419e6038 R14: 00007f91419e5fa0 R15: 00007fff9e63cf48 [ 77.435636][ T5921] [ 77.438641][ T5921] Modules linked in: [ 77.443636][ T5921] ---[ end trace 0000000000000000 ]--- [ 77.453740][ T5921] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 77.460435][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.461870][ T5819] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 77.480673][ T5921] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 77.484836][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.504833][ T5921] RSP: 0018:ffffc90005207cd0 EFLAGS: 00010206 [ 77.516120][ T5921] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 77.552485][ T5921] RDX: ffffc900046a2000 RSI: 0000000000000053 RDI: 0000000000000054 [ 77.573481][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.581966][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.590738][ T5921] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 77.600099][ T5921] R10: dffffc0000000000 R11: fffff52000a40f78 R12: dffffc0000000000 [ 77.632437][ T5921] R13: 0000000000000017 R14: 00000000000000ba R15: ffff88802945048c [ 77.668296][ T5921] FS: 00007f91426a66c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 77.686507][ T5921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.701626][ T5921] CR2: 000055d879acb660 CR3: 00000000338dc000 CR4: 00000000003526f0 [ 77.709814][ T5825] Bluetooth: hci3: command tx timeout [ 77.719585][ T5921] Kernel panic - not syncing: Fatal exception [ 77.725922][ T5921] Kernel Offset: disabled [ 77.730233][ T5921] Rebooting in 86400 seconds..