last executing test programs: 1.943304982s ago: executing program 3 (id=5): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 1.839066947s ago: executing program 3 (id=6): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000b00), 0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, 0x0) 1.691060161s ago: executing program 3 (id=7): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x1b0}}], 0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r3, 0x0, 0x0, 0xffe0) 1.560049613s ago: executing program 3 (id=8): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x6, 0xe364, 0xfffffffffffffffa, 0x8, 0xfffffffffffffff9, 0xa8d1, 0x9, 0x5}, 0x0, 0x0, 0x0, 0x0) 1.289755629s ago: executing program 0 (id=1): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) io_setup(0x9bb1, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40012160, 0x0) 1.082601425s ago: executing program 2 (id=3): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.056536359s ago: executing program 1 (id=2): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0, @ANYRES64=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x80, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0xb3a6, 0x0, 0xffffffffffffffff, 0xa, 0xd], 0x0, 0x141d01}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 758.950287ms ago: executing program 1 (id=9): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, 0x0, 0x28) 656.372708ms ago: executing program 0 (id=10): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4020}, 0x0) 653.47278ms ago: executing program 3 (id=11): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 611.627372ms ago: executing program 1 (id=12): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) madvise(&(0x7f00001e4000/0x4000)=nil, 0x4000, 0xe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) 442.424775ms ago: executing program 2 (id=13): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x20000014) 433.440032ms ago: executing program 3 (id=14): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x60000600) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012160, 0x0) 373.694701ms ago: executing program 1 (id=15): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 347.513579ms ago: executing program 0 (id=16): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) 191.733683ms ago: executing program 1 (id=17): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x12, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 180.928091ms ago: executing program 2 (id=18): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x6, 0x0, 0x100, 0xffffffffffffffff, 0x2480187, r4}) 138.635265ms ago: executing program 0 (id=19): unshare(0x20040600) unshare(0x22020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 0s ago: executing program 2 (id=20): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500), 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c69700014000780"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 83.349120][ T5811] cgroup: Unknown subsys name 'net' [ 83.460109][ T5811] cgroup: Unknown subsys name 'cpuset' [ 83.469098][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.141175][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.809085][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.817998][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.826202][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.834358][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.842698][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.905771][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.914102][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.923029][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.931595][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.939763][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.952017][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.965709][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.973866][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.983326][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.991598][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.032023][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.040441][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.048498][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.058099][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.065934][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.398840][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 89.671786][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.682177][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.689924][ T5821] bridge_slave_0: entered allmulticast mode [ 89.698126][ T5821] bridge_slave_0: entered promiscuous mode [ 89.727335][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 89.739956][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.747513][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.754737][ T5821] bridge_slave_1: entered allmulticast mode [ 89.762353][ T5821] bridge_slave_1: entered promiscuous mode [ 89.784423][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.896522][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.938767][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.961453][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.008581][ T5821] team0: Port device team_slave_0 added [ 90.061768][ T5821] team0: Port device team_slave_1 added [ 90.125537][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.133437][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.140996][ T5826] bridge_slave_0: entered allmulticast mode [ 90.148887][ T5826] bridge_slave_0: entered promiscuous mode [ 90.177812][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.184810][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.211209][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.223167][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.230560][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.237996][ T5828] bridge_slave_0: entered allmulticast mode [ 90.245838][ T5828] bridge_slave_0: entered promiscuous mode [ 90.254264][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.261581][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.268880][ T5826] bridge_slave_1: entered allmulticast mode [ 90.276475][ T5826] bridge_slave_1: entered promiscuous mode [ 90.290138][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.297208][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.323406][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.334857][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.342238][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.349773][ T5828] bridge_slave_1: entered allmulticast mode [ 90.357605][ T5828] bridge_slave_1: entered promiscuous mode [ 90.447055][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.456487][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.463739][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.471641][ T5830] bridge_slave_0: entered allmulticast mode [ 90.479183][ T5830] bridge_slave_0: entered promiscuous mode [ 90.504045][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.516420][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.526306][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.533504][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.540851][ T5830] bridge_slave_1: entered allmulticast mode [ 90.548647][ T5830] bridge_slave_1: entered promiscuous mode [ 90.572376][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.664818][ T5826] team0: Port device team_slave_0 added [ 90.689817][ T5821] hsr_slave_0: entered promiscuous mode [ 90.696896][ T5821] hsr_slave_1: entered promiscuous mode [ 90.706302][ T5828] team0: Port device team_slave_0 added [ 90.714417][ T5826] team0: Port device team_slave_1 added [ 90.736529][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.749531][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.761361][ T5828] team0: Port device team_slave_1 added [ 90.820952][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.828368][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.854877][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.882105][ T5830] team0: Port device team_slave_0 added [ 90.902124][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.909270][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.916533][ T5824] Bluetooth: hci0: command tx timeout [ 90.941438][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.961910][ T5830] team0: Port device team_slave_1 added [ 90.982054][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.989168][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.015584][ T5824] Bluetooth: hci1: command tx timeout [ 91.016113][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.065050][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.072359][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.098586][ T5824] Bluetooth: hci2: command tx timeout [ 91.098905][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.148206][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.155194][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.181424][ T5824] Bluetooth: hci3: command tx timeout [ 91.188103][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.201281][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.208293][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.235079][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.314072][ T5828] hsr_slave_0: entered promiscuous mode [ 91.321882][ T5828] hsr_slave_1: entered promiscuous mode [ 91.328751][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 91.334604][ T5828] Cannot create hsr debugfs directory [ 91.346318][ T5826] hsr_slave_0: entered promiscuous mode [ 91.352993][ T5826] hsr_slave_1: entered promiscuous mode [ 91.359654][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 91.365520][ T5826] Cannot create hsr debugfs directory [ 91.487013][ T5830] hsr_slave_0: entered promiscuous mode [ 91.493758][ T5830] hsr_slave_1: entered promiscuous mode [ 91.500711][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 91.506527][ T5830] Cannot create hsr debugfs directory [ 91.897716][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.913131][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.934565][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.946535][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.025089][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.047551][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.069435][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.081087][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.150282][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.174276][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.185189][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.201166][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.297466][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.312267][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.325012][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.336946][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.440787][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.517570][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.542841][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.550230][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.563698][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.571044][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.590001][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.636598][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.713182][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.728389][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.745909][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.761729][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.768947][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.792136][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.799362][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.831729][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.838956][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.853965][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.861196][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.873282][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.903362][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.910589][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.941017][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.948293][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.996823][ T5824] Bluetooth: hci0: command tx timeout [ 93.076589][ T5824] Bluetooth: hci1: command tx timeout [ 93.109822][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.155841][ T5824] Bluetooth: hci2: command tx timeout [ 93.235838][ T5824] Bluetooth: hci3: command tx timeout [ 93.303922][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.431960][ T5821] veth0_vlan: entered promiscuous mode [ 93.481684][ T5821] veth1_vlan: entered promiscuous mode [ 93.601565][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.611683][ T5821] veth0_macvtap: entered promiscuous mode [ 93.625077][ T5821] veth1_macvtap: entered promiscuous mode [ 93.640135][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.676806][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.694443][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.720910][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.744914][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.758177][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.768773][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.787913][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860294][ T5826] veth0_vlan: entered promiscuous mode [ 93.874024][ T5828] veth0_vlan: entered promiscuous mode [ 93.903265][ T5826] veth1_vlan: entered promiscuous mode [ 93.932057][ T5830] veth0_vlan: entered promiscuous mode [ 93.959512][ T5828] veth1_vlan: entered promiscuous mode [ 93.998337][ T5830] veth1_vlan: entered promiscuous mode [ 94.006742][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.014717][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.078857][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.094368][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.098532][ T5826] veth0_macvtap: entered promiscuous mode [ 94.119108][ T5826] veth1_macvtap: entered promiscuous mode [ 94.129365][ T5828] veth0_macvtap: entered promiscuous mode [ 94.147181][ T5828] veth1_macvtap: entered promiscuous mode [ 94.182188][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.198872][ T5830] veth0_macvtap: entered promiscuous mode [ 94.223811][ T5830] veth1_macvtap: entered promiscuous mode [ 94.261982][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.279406][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.310511][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.332949][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.339368][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.354089][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.374500][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.384584][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.414645][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.423964][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.446384][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.476625][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.524003][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.568750][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.594527][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.607996][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.647399][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.721337][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.778826][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.811831][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.812589][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.819916][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.886120][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.894028][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.927124][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.936321][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.963257][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.982332][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.076079][ T5824] Bluetooth: hci0: command tx timeout [ 95.088558][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.099468][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.110101][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.138340][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.156251][ T5824] Bluetooth: hci1: command tx timeout [ 95.236675][ T5824] Bluetooth: hci2: command tx timeout [ 95.316041][ T5824] Bluetooth: hci3: command tx timeout [ 95.412569][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.303794][ T5954] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] SMP KASAN PTI [ 96.315759][ T5954] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 96.324232][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 96.333382][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.343478][ T5954] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 96.348728][ T5954] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 96.368373][ T5954] RSP: 0018:ffffc90004677cd0 EFLAGS: 00010206 [ 96.374485][ T5954] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 96.382504][ T5954] RDX: ffffc9000b46a000 RSI: 0000000000002e67 RDI: 0000000000002e68 [ 96.390513][ T5954] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 96.398516][ T5954] R10: dffffc0000000000 R11: fffff520008cef78 R12: dffffc0000000000 [ 96.406548][ T5954] R13: 0000000000000017 R14: 00000000000000ba R15: ffff8880286b01b4 [ 96.414536][ T5954] FS: 00007f49849016c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 96.423492][ T5954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.430088][ T5954] CR2: 0000200000000000 CR3: 000000007999a000 CR4: 00000000003526f0 [ 96.438071][ T5954] Call Trace: [ 96.441368][ T5954] [ 96.444308][ T5954] nsproxy_free+0x20f/0x7c0 [ 96.448824][ T5954] create_new_namespaces+0x47a/0x540 [ 96.454119][ T5954] unshare_nsproxy_namespaces+0x11c/0x170 [ 96.459888][ T5954] ksys_unshare+0x4c8/0x8c0 [ 96.464415][ T5954] ? __pfx_ksys_unshare+0x10/0x10 [ 96.469455][ T5954] __x64_sys_unshare+0x38/0x50 [ 96.474230][ T5954] do_syscall_64+0xfa/0xfa0 [ 96.478749][ T5954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.484828][ T5954] ? clear_bhb_loop+0x60/0xb0 [ 96.489551][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.495454][ T5954] RIP: 0033:0x7f498398f6c9 [ 96.499890][ T5954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.519517][ T5954] RSP: 002b:00007f4984901038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 96.527956][ T5954] RAX: ffffffffffffffda RBX: 00007f4983be5fa0 RCX: 00007f498398f6c9 [ 96.535943][ T5954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 96.543927][ T5954] RBP: 00007f4983a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.551904][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.559892][ T5954] R13: 00007f4983be6038 R14: 00007f4983be5fa0 R15: 00007ffebdb525f8 [ 96.567883][ T5954] [ 96.570912][ T5954] Modules linked in: [ 96.576759][ T5954] ---[ end trace 0000000000000000 ]--- [ 96.601655][ T5957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 96.622354][ T5954] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 96.634213][ T5954] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 96.654286][ T5954] RSP: 0018:ffffc90004677cd0 EFLAGS: 00010206 [ 96.661275][ T5954] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 96.669883][ T5954] RDX: ffffc9000b46a000 RSI: 0000000000002e67 RDI: 0000000000002e68 [ 96.680180][ T5954] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 96.688471][ T5954] R10: dffffc0000000000 R11: fffff520008cef78 R12: dffffc0000000000 [ 96.696817][ T5954] R13: 0000000000000017 R14: 00000000000000ba R15: ffff8880286b01b4 [ 96.704835][ T5954] FS: 00007f49849016c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 96.715209][ T5954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.722115][ T5954] CR2: 0000200000000000 CR3: 000000007999a000 CR4: 00000000003526f0 [ 96.730703][ T5954] Kernel panic - not syncing: Fatal exception [ 96.737133][ T5954] Kernel Offset: disabled [ 96.741468][ T5954] Rebooting in 86400 seconds..