last executing test programs: 5.638251334s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd25479024a676b21b3adc5e463c9effbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953584db11b7f89ec68098eafa48cebd6882a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56f335e2373b2cde5600db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8b03fe4798e5750d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.091630227s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f00000000c0)) 4.290798144s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$watch_queue(0x0, 0x80) 4.01979306s ago: executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280), 0x1, 0x400}) 3.99123835s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010010850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r3, r2, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02130000050000000000000000000000030018"], 0x28}}, 0x0) 3.872917534s ago: executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet6_mreq(r1, 0x10d, 0x92, 0x0, &(0x7f0000000040)) 3.385121337s ago: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e0e, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x0, 0x2}]}]}}}], 0x18}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) 3.297325345s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x2}]}, 0x38}}, 0x0) 3.206587497s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 3.186933782s ago: executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_list_modules(0x0, 0x0, 0x0) 3.164441969s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x9, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r0}, 0x38) 2.743158941s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000050000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) timer_getoverrun(0x0) 2.720341432s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 2.559721508s ago: executing program 2: r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/178, 0xb2}], 0x1}, 0x0, 0xc0012121}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0xb7) 2.352306767s ago: executing program 4: r0 = memfd_create(&(0x7f00000001c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.347735239s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003b00090000000000cd0000000100000018000380", @ANYRESOCT=r1], 0x2c}}, 0x0) 1.923415965s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000050000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) timer_create(0x0, 0x0, &(0x7f00000011c0)) timer_getoverrun(0x0) 1.909289089s ago: executing program 0: r0 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x25, 0x0, 0x0) 1.799577237s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000470000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) 1.748634604s ago: executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet6_mreq(r1, 0x10d, 0x92, 0x0, &(0x7f0000000040)) 1.643994025s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1d}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 1.127181621s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x14, &(0x7f0000001080)={r1}, &(0x7f00000010c0)=0x8) 1.064775658s ago: executing program 1: gettid() openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000000900010073797a30000000005c000000030a05000000000000000000030000000900010073797a30000000001400048008000240000000000800014000000000090003"], 0xa4}}, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0), 0x4) 959.584041ms ago: executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 836.82751ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 659.356179ms ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000001480)=ANY=[@ANYBLOB="0180c2000000000012000000080045000028f3ffff"], 0x0) 209.583594ms ago: executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000002000000000000000001801000020786c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000550000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 78.950941ms ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_emit_ethernet(0x58, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000e8ffffffb702000008000000b7030000000000008500000006000000460000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 35.454617ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 0s ago: executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. 2024/06/01 13:12:51 fuzzer started 2024/06/01 13:12:52 dialing manager at 10.128.0.169:30026 [ 158.198778][ T5045] cgroup: Unknown subsys name 'net' [ 158.458514][ T5045] cgroup: Unknown subsys name 'rlimit' 2024/06/01 13:13:39 starting 5 executor processes [ 204.520278][ T5047] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 207.327111][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.337822][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.347812][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.365941][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.456808][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.472942][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.623331][ T4428] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.643803][ T4428] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.674510][ T5079] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.688089][ T5079] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.701280][ T5079] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.710840][ T5079] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.871404][ T5079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.928713][ T5079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.968443][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.978196][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.993955][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.005320][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.016835][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.052305][ T4428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.070550][ T4428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.078610][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.105661][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.129461][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.138644][ T4428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.144096][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.158828][ T4428] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.167481][ T4428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.182133][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.247086][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.747567][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 209.105882][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 209.490900][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 209.581140][ T50] Bluetooth: hci0: command tx timeout [ 209.800073][ T50] Bluetooth: hci1: command tx timeout [ 209.835426][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.843522][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.851541][ T5072] bridge_slave_0: entered allmulticast mode [ 209.860930][ T5072] bridge_slave_0: entered promiscuous mode [ 209.959728][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.970040][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.977726][ T5072] bridge_slave_1: entered allmulticast mode [ 209.987743][ T5072] bridge_slave_1: entered promiscuous mode [ 209.998976][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 210.121636][ T50] Bluetooth: hci2: command tx timeout [ 210.236167][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.246645][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 210.291968][ T50] Bluetooth: hci3: command tx timeout [ 210.313843][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.450006][ T50] Bluetooth: hci4: command tx timeout [ 210.593711][ T5072] team0: Port device team_slave_0 added [ 210.617222][ T5072] team0: Port device team_slave_1 added [ 210.664972][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.673054][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.680979][ T5076] bridge_slave_0: entered allmulticast mode [ 210.690315][ T5076] bridge_slave_0: entered promiscuous mode [ 210.820215][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.827975][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.835867][ T5076] bridge_slave_1: entered allmulticast mode [ 210.849583][ T5076] bridge_slave_1: entered promiscuous mode [ 211.029818][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.038486][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.064966][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.114365][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.125556][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.133445][ T5078] bridge_slave_0: entered allmulticast mode [ 211.142741][ T5078] bridge_slave_0: entered promiscuous mode [ 211.168193][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.176797][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.203251][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.230863][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.295703][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.303910][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.311791][ T5078] bridge_slave_1: entered allmulticast mode [ 211.320832][ T5078] bridge_slave_1: entered promiscuous mode [ 211.338293][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.527544][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.535480][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.543334][ T5082] bridge_slave_0: entered allmulticast mode [ 211.552320][ T5082] bridge_slave_0: entered promiscuous mode [ 211.640013][ T50] Bluetooth: hci0: command tx timeout [ 211.774271][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.784616][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.792676][ T5082] bridge_slave_1: entered allmulticast mode [ 211.803267][ T5082] bridge_slave_1: entered promiscuous mode [ 211.812100][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.819805][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.827919][ T5083] bridge_slave_0: entered allmulticast mode [ 211.837118][ T5083] bridge_slave_0: entered promiscuous mode [ 211.860992][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.870973][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.878680][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.886835][ T5083] bridge_slave_1: entered allmulticast mode [ 211.895957][ T5083] bridge_slave_1: entered promiscuous mode [ 211.906293][ T50] Bluetooth: hci1: command tx timeout [ 211.912201][ T5076] team0: Port device team_slave_0 added [ 211.966601][ T5072] hsr_slave_0: entered promiscuous mode [ 211.975684][ T5072] hsr_slave_1: entered promiscuous mode [ 212.029768][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.047114][ T5076] team0: Port device team_slave_1 added [ 212.205555][ T50] Bluetooth: hci2: command tx timeout [ 212.235087][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.246712][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.254046][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.280488][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.307905][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.358312][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.364338][ T50] Bluetooth: hci3: command tx timeout [ 212.400175][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.407378][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.433839][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.474318][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.492813][ T5078] team0: Port device team_slave_0 added [ 212.520131][ T50] Bluetooth: hci4: command tx timeout [ 212.612178][ T5078] team0: Port device team_slave_1 added [ 212.708127][ T5083] team0: Port device team_slave_0 added [ 212.778641][ T5082] team0: Port device team_slave_0 added [ 212.794585][ T5083] team0: Port device team_slave_1 added [ 212.904842][ T5082] team0: Port device team_slave_1 added [ 213.015730][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.023277][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.049522][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.102538][ T5076] hsr_slave_0: entered promiscuous mode [ 213.113347][ T5076] hsr_slave_1: entered promiscuous mode [ 213.121942][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.129637][ T5076] Cannot create hsr debugfs directory [ 213.140862][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.147993][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.174275][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.203177][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.210472][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.236912][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.282579][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.289749][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.316322][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.331028][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.338408][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.364951][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.491125][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.498289][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.524766][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.717406][ T5083] hsr_slave_0: entered promiscuous mode [ 213.723325][ T50] Bluetooth: hci0: command tx timeout [ 213.730552][ T5083] hsr_slave_1: entered promiscuous mode [ 213.739321][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.749262][ T5083] Cannot create hsr debugfs directory [ 213.869318][ T5078] hsr_slave_0: entered promiscuous mode [ 213.878426][ T5078] hsr_slave_1: entered promiscuous mode [ 213.889196][ T5078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.897102][ T5078] Cannot create hsr debugfs directory [ 213.962241][ T50] Bluetooth: hci1: command tx timeout [ 214.194463][ T5082] hsr_slave_0: entered promiscuous mode [ 214.205963][ T5082] hsr_slave_1: entered promiscuous mode [ 214.214621][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.222512][ T5082] Cannot create hsr debugfs directory [ 214.280343][ T50] Bluetooth: hci2: command tx timeout [ 214.440149][ T50] Bluetooth: hci3: command tx timeout [ 214.600466][ T50] Bluetooth: hci4: command tx timeout [ 214.774330][ T5072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.808862][ T5072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.832611][ T5072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.929659][ T5072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.298678][ T5076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.373741][ T5076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.438732][ T5083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.466839][ T5076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.489465][ T5076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.516512][ T5083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.580994][ T5083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.697243][ T5083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.745914][ T5078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.820629][ T50] Bluetooth: hci0: command tx timeout [ 215.844799][ T5078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.927398][ T5078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.955822][ T5078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.031438][ T5082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.040923][ T50] Bluetooth: hci1: command tx timeout [ 216.118460][ T5082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.150999][ T5082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.174547][ T5082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.369231][ T50] Bluetooth: hci2: command tx timeout [ 216.523790][ T50] Bluetooth: hci3: command tx timeout [ 216.687367][ T50] Bluetooth: hci4: command tx timeout [ 216.984499][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.135285][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.167401][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.245877][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.351586][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.368327][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.376194][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.410527][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.462049][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.537339][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.545192][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.578775][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.586618][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.602824][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.610584][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.687684][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.695585][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.802445][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.810376][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.863100][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.948523][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.956365][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.070319][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.078006][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.185535][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.338995][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.443812][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.451661][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.605284][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.613063][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.143311][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.150946][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.624428][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.735085][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.779815][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.842389][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.180249][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.445613][ T5072] veth0_vlan: entered promiscuous mode [ 221.591004][ T5078] veth0_vlan: entered promiscuous mode [ 221.624356][ T5072] veth1_vlan: entered promiscuous mode [ 221.705777][ T5083] veth0_vlan: entered promiscuous mode [ 221.767589][ T5078] veth1_vlan: entered promiscuous mode [ 221.902077][ T5083] veth1_vlan: entered promiscuous mode [ 221.934604][ T5082] veth0_vlan: entered promiscuous mode [ 222.150699][ T5082] veth1_vlan: entered promiscuous mode [ 222.166879][ T5078] veth0_macvtap: entered promiscuous mode [ 222.187816][ T5072] veth0_macvtap: entered promiscuous mode [ 222.243002][ T5078] veth1_macvtap: entered promiscuous mode [ 222.319389][ T5072] veth1_macvtap: entered promiscuous mode [ 222.370007][ T5083] veth0_macvtap: entered promiscuous mode [ 222.474140][ T5083] veth1_macvtap: entered promiscuous mode [ 222.582986][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.652709][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.663579][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.678906][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.714205][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.799069][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.811729][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.830347][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.845682][ T5082] veth0_macvtap: entered promiscuous mode [ 222.881264][ T5078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.890505][ T5078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.899631][ T5078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.908884][ T5078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.947911][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.959655][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.970081][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.980892][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.996081][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.016953][ T5082] veth1_macvtap: entered promiscuous mode [ 223.059622][ T5072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.073683][ T5072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.090753][ T5072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.099800][ T5072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.164091][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.175000][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.185908][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.196688][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.212319][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.314974][ T5083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.324361][ T5083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.333662][ T5083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.342889][ T5083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.485701][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.498245][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.509209][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.521014][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.531176][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.542713][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.558180][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.771820][ T5076] veth0_vlan: entered promiscuous mode [ 223.828795][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.841074][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.852714][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.864458][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.874637][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.888285][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.904410][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.021340][ T5076] veth1_vlan: entered promiscuous mode [ 224.157276][ T5082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.166500][ T5082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.175811][ T5082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.185071][ T5082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.479819][ T5076] veth0_macvtap: entered promiscuous mode [ 224.605110][ T5076] veth1_macvtap: entered promiscuous mode [ 224.828104][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.839152][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.854995][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.867609][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.877763][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.888550][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.898792][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.909528][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.924913][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.125269][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.136102][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.146270][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.156989][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.173468][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.185682][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.195812][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.206618][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.221954][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.524159][ T5076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.535436][ T5076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.545555][ T5076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.554686][ T5076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.760652][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.768747][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.014658][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.022836][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.054796][ T5154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.063087][ T5154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.178851][ T5154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.186967][ T5154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.262647][ T4127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.270857][ T4127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.477514][ T4127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.485893][ T4127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.989220][ T5251] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.308699][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.317001][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.662990][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.671484][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.225742][ T5263] syz-executor.3[5263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.226327][ T5263] syz-executor.3[5263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.304812][ T29] audit: type=1326 audit(1717247647.375:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7484579 code=0x7ffc0000 [ 232.339732][ T29] audit: type=1326 audit(1717247647.375:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7484579 code=0x7ffc0000 [ 232.339808][ T5262] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 232.386253][ T29] audit: type=1326 audit(1717247647.375:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7484579 code=0x7ffc0000 [ 232.435589][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.443872][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.673250][ T29] audit: type=1326 audit(1717247647.545:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7484579 code=0x7ffc0000 [ 232.696234][ T29] audit: type=1326 audit(1717247647.545:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7484579 code=0x7ffc0000 [ 232.719188][ T29] audit: type=1326 audit(1717247647.545:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7484579 code=0x7ffc0000 [ 232.742097][ T29] audit: type=1326 audit(1717247647.545:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7484579 code=0x7ffc0000 [ 232.765346][ T29] audit: type=1326 audit(1717247647.565:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7484579 code=0x7ffc0000 [ 232.800207][ T3992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.808269][ T3992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.917309][ T5266] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 236.903131][ T5317] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.639595][ T29] audit: type=1326 audit(1717247652.645:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 237.691250][ T5327] ===================================================== [ 237.698540][ T5327] BUG: KMSAN: uninit-value in strnchr+0x90/0xd0 [ 237.704975][ T5327] strnchr+0x90/0xd0 [ 237.709049][ T5327] bpf_bprintf_prepare+0x1c2/0x23c0 [ 237.714450][ T5327] bpf_trace_printk+0xec/0x3e0 [ 237.719432][ T5327] ___bpf_prog_run+0x13fe/0xe0f0 [ 237.724550][ T5327] __bpf_prog_run32+0xb2/0xe0 [ 237.729400][ T5327] bpf_trace_run2+0x116/0x300 [ 237.734241][ T5327] __bpf_trace_tlb_flush+0x2c/0x40 [ 237.739538][ T5327] switch_mm_irqs_off+0x9d2/0x1010 [ 237.744825][ T5327] __text_poke+0xb4e/0xfb0 [ 237.749440][ T5327] text_poke_bp_batch+0x17f/0x960 [ 237.754668][ T5327] text_poke_finish+0x7d/0xd0 [ 237.759536][ T5327] arch_jump_label_transform_apply+0x23/0x40 [ 237.765683][ T5327] __jump_label_update+0x6af/0x6d0 [ 237.770999][ T5327] jump_label_update+0x6a0/0x7a0 [ 237.776121][ T5327] static_key_enable_cpuslocked+0x229/0x260 [ 237.782212][ T5327] static_key_enable+0x23/0x30 [ 237.787161][ T5327] tracepoint_add_func+0x1084/0x1280 [ 237.792652][ T5327] tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 237.799642][ T5327] bpf_probe_register+0x201/0x250 [ 237.804834][ T5327] bpf_raw_tp_link_attach+0x627/0x8a0 [ 237.810404][ T5327] bpf_raw_tracepoint_open+0x485/0x8a0 [ 237.816138][ T5327] __sys_bpf+0x5a6/0xd90 [ 237.820540][ T5327] __ia32_sys_bpf+0xa0/0xe0 [ 237.825193][ T5327] ia32_sys_call+0xf7e/0x40a0 [ 237.830072][ T5327] __do_fast_syscall_32+0xb4/0x120 [ 237.835382][ T5327] do_fast_syscall_32+0x38/0x80 [ 237.840425][ T5327] do_SYSENTER_32+0x1f/0x30 [ 237.845118][ T5327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.851660][ T5327] [ 237.854066][ T5327] Local variable stack created at: [ 237.859270][ T5327] __bpf_prog_run32+0x43/0xe0 [ 237.864116][ T5327] bpf_trace_run2+0x116/0x300 [ 237.868946][ T5327] [ 237.871362][ T5327] CPU: 0 PID: 5327 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 237.881514][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 237.891735][ T5327] ===================================================== [ 237.898763][ T5327] Disabling lock debugging due to kernel taint [ 237.905026][ T5327] Kernel panic - not syncing: kmsan.panic set ... [ 237.911547][ T5327] CPU: 0 PID: 5327 Comm: syz-executor.2 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 237.923140][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 237.933302][ T5327] Call Trace: [ 237.936661][ T5327] [ 237.939673][ T5327] dump_stack_lvl+0x216/0x2d0 [ 237.944516][ T5327] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 237.950473][ T5327] dump_stack+0x1e/0x30 [ 237.954777][ T5327] panic+0x4e2/0xcd0 [ 237.958814][ T5327] ? kmsan_get_metadata+0xf1/0x1d0 [ 237.964073][ T5327] kmsan_report+0x2d5/0x2e0 [ 237.968712][ T5327] ? kernel_text_address+0x129/0x1b0 [ 237.974172][ T5327] ? __msan_warning+0x95/0x120 [ 237.979056][ T5327] ? strnchr+0x90/0xd0 [ 237.983272][ T5327] ? bpf_bprintf_prepare+0x1c2/0x23c0 [ 237.988810][ T5327] ? bpf_trace_printk+0xec/0x3e0 [ 237.993899][ T5327] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 237.999153][ T5327] ? __bpf_prog_run32+0xb2/0xe0 [ 238.004137][ T5327] ? bpf_trace_run2+0x116/0x300 [ 238.009111][ T5327] ? __bpf_trace_tlb_flush+0x2c/0x40 [ 238.014544][ T5327] ? switch_mm_irqs_off+0x9d2/0x1010 [ 238.019966][ T5327] ? __text_poke+0xb4e/0xfb0 [ 238.024705][ T5327] ? text_poke_bp_batch+0x17f/0x960 [ 238.030075][ T5327] ? text_poke_finish+0x7d/0xd0 [ 238.035164][ T5327] ? arch_jump_label_transform_apply+0x23/0x40 [ 238.041460][ T5327] ? __jump_label_update+0x6af/0x6d0 [ 238.046923][ T5327] ? jump_label_update+0x6a0/0x7a0 [ 238.052182][ T5327] ? static_key_enable_cpuslocked+0x229/0x260 [ 238.058413][ T5327] ? static_key_enable+0x23/0x30 [ 238.063508][ T5327] ? tracepoint_add_func+0x1084/0x1280 [ 238.069140][ T5327] ? tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 238.076257][ T5327] ? bpf_probe_register+0x201/0x250 [ 238.081600][ T5327] ? bpf_raw_tp_link_attach+0x627/0x8a0 [ 238.087308][ T5327] ? bpf_raw_tracepoint_open+0x485/0x8a0 [ 238.093091][ T5327] ? __sys_bpf+0x5a6/0xd90 [ 238.097650][ T5327] ? __ia32_sys_bpf+0xa0/0xe0 [ 238.102459][ T5327] ? ia32_sys_call+0xf7e/0x40a0 [ 238.107483][ T5327] ? __do_fast_syscall_32+0xb4/0x120 [ 238.112936][ T5327] ? do_fast_syscall_32+0x38/0x80 [ 238.118111][ T5327] ? do_SYSENTER_32+0x1f/0x30 [ 238.122934][ T5327] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.129611][ T5327] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 238.136033][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.141360][ T5327] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 238.147314][ T5327] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 238.153265][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.158594][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.163928][ T5327] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 238.169964][ T5327] __msan_warning+0x95/0x120 [ 238.174673][ T5327] strnchr+0x90/0xd0 [ 238.178719][ T5327] bpf_bprintf_prepare+0x1c2/0x23c0 [ 238.184090][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.189425][ T5327] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 238.195851][ T5327] ? __msan_memcpy+0x108/0x1c0 [ 238.200776][ T5327] bpf_trace_printk+0xec/0x3e0 [ 238.205692][ T5327] ? __bpf_prog_run32+0x5c/0xe0 [ 238.210680][ T5327] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 238.216630][ T5327] ___bpf_prog_run+0x13fe/0xe0f0 [ 238.221707][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.227055][ T5327] __bpf_prog_run32+0xb2/0xe0 [ 238.231870][ T5327] ? kmsan_get_metadata+0x110/0x1d0 [ 238.237211][ T5327] ? __pfx___bpf_prog_run32+0x10/0x10 [ 238.242727][ T5327] bpf_trace_run2+0x116/0x300 [ 238.247535][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.252868][ T5327] __bpf_trace_tlb_flush+0x2c/0x40 [ 238.258126][ T5327] switch_mm_irqs_off+0x9d2/0x1010 [ 238.263412][ T5327] __text_poke+0xb4e/0xfb0 [ 238.268003][ T5327] ? __pfx_text_poke_memcpy+0x10/0x10 [ 238.273549][ T5327] ? switch_mm_irqs_off+0x920/0x1010 [ 238.278980][ T5327] ? switch_mm_irqs_off+0x920/0x1010 [ 238.284397][ T5327] text_poke_bp_batch+0x17f/0x960 [ 238.289582][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.294931][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.300257][ T5327] ? kmsan_get_shadow_origin_ptr+0x16/0xb0 [ 238.306290][ T5327] text_poke_finish+0x7d/0xd0 [ 238.311121][ T5327] arch_jump_label_transform_apply+0x23/0x40 [ 238.317236][ T5327] __jump_label_update+0x6af/0x6d0 [ 238.322536][ T5327] jump_label_update+0x6a0/0x7a0 [ 238.327626][ T5327] ? kmsan_report+0x2a0/0x2e0 [ 238.332434][ T5327] static_key_enable_cpuslocked+0x229/0x260 [ 238.338498][ T5327] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 238.344451][ T5327] static_key_enable+0x23/0x30 [ 238.349365][ T5327] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 238.354912][ T5327] tracepoint_add_func+0x1084/0x1280 [ 238.360365][ T5327] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 238.366792][ T5327] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 238.372746][ T5327] tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 238.379687][ T5327] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 238.385647][ T5327] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 238.391600][ T5327] bpf_probe_register+0x201/0x250 [ 238.396778][ T5327] bpf_raw_tp_link_attach+0x627/0x8a0 [ 238.402315][ T5327] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 238.408551][ T5327] ? kmsan_get_metadata+0x146/0x1d0 [ 238.413886][ T5327] bpf_raw_tracepoint_open+0x485/0x8a0 [ 238.419505][ T5327] __sys_bpf+0x5a6/0xd90 [ 238.423930][ T5327] __ia32_sys_bpf+0xa0/0xe0 [ 238.428601][ T5327] ia32_sys_call+0xf7e/0x40a0 [ 238.433459][ T5327] __do_fast_syscall_32+0xb4/0x120 [ 238.438753][ T5327] ? switch_fpu_return+0x17/0x20 [ 238.443883][ T5327] do_fast_syscall_32+0x38/0x80 [ 238.448911][ T5327] do_SYSENTER_32+0x1f/0x30 [ 238.453566][ T5327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.460080][ T5327] RIP: 0023:0xf73c2579 [ 238.464242][ T5327] Code: Unable to access opcode bytes at 0xf73c254f. [ 238.470994][ T5327] RSP: 002b:00000000f5e4b5ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 238.479549][ T5327] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000080 [ 238.487656][ T5327] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.495730][ T5327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.503794][ T5327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 238.511861][ T5327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.519948][ T5327] [ 239.906096][ T5327] Shutting down cpus with NMI [ 239.911153][ T5327] Kernel Offset: disabled [ 239.915541][ T5327] Rebooting in 86400 seconds..