last executing test programs: 11.750854756s ago: executing program 4 (id=5011): close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x20) close(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 11.664455624s ago: executing program 4 (id=5015): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x121bff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) 11.430695375s ago: executing program 4 (id=5020): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xff14) 11.417239286s ago: executing program 4 (id=5021): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/127, 0x7f}], 0x3, &(0x7f0000000680)=""/238, 0xee}, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0xb4}}, 0x0) 11.342408703s ago: executing program 4 (id=5024): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f00000001c0)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) creat(&(0x7f0000000440)='./file0\x00', 0x0) 11.316671216s ago: executing program 4 (id=5027): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f00000001c0)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) creat(&(0x7f0000000440)='./file0\x00', 0x0) 1.180627981s ago: executing program 3 (id=5448): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x3000000) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x9, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000002100)="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", 0x1000}, {&(0x7f00000002c0)="e6f82ee8ef5319629be9f3c969029362625bfbb34142d07edc504e6073107e49d1ff4353e7526e9689d3688391e62649bef4160a243e998ffc9ffde12e89a0052238df5098f7ac03c539de4522171ccb2bd0196f6906cf5871fd", 0x5a}, {&(0x7f0000000340)="4cfd20c45e59c4c95d6248c16278373c48b92be5b443d93e11917dd5383e4e55eded589ff9da32774059d3d936b3564e484649889ff259df42d708a22fa5c3dec9bab50d02d450e7efd33d1c65e2107d9c7608966499a4e2e308f15f1b2144e75c39bbfb4579edc948c21b4265d752b61a0d418b0bf5676feda078cbcc", 0x7d}, {&(0x7f0000000080)="68ac1a5ebf4f8734b78a2a07b4d56531332023ef0d39f4b092996a1a8a396ced0438a131bb6213489e0d", 0x2a}, {&(0x7f00000003c0)="426ae59aa5d0140dbd491ab7b99361f7c12bc17efcd16efe2a2caa8d8e61218ad8893905d077f468f4a14ced492693e860ea", 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x38, 0x4000000}, 0x40) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") socket$netlink(0x10, 0x3, 0xe) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x2, &(0x7f0000001180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000500)=0x0) timer_settime(r9, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) 1.132363555s ago: executing program 2 (id=5451): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000", @ANYRES8=r3, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) syz_clone3(&(0x7f0000000880)={0x100000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@dax_inode}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid}], [{@audit}, {@euid_gt}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$eJzs3EtvVGUfAPD/mbaUvtC3fXm9cVFG0dhopLRcFy6AaMLGxERjcFnbQpAChtYESCPFGEhcaPgEXnYmfgJXujFqXGjcStwaE2K6AV2YY87MmTrt6fTGtGPp75fM8JzbPM//nPMwz2VOA9iwytlbErE1In6OiJ7q4uwdytV/7k5PDv8xPTmcRJq+8ntS2e/O9ORwbdfacVvyhb5SROm9JHYWs+0cv3zl7NDY2OjFfEX/RClPnRs6PXp69PzgkSMH9ncdPjR4sClxZmW6s+OdC7u2n3j95kvDJ2++8e3nWXnTfHt9HFW9lfdNS86hrbCmHOXZ57LOU0sv+rrQXZdO2rP3UusKw5Jld212uToq9b8n2ipLVT3x4rstLRywqtI0TTsLa2e+y6bSeklSPSBNr6XAfSCJVpcAaI3aF/2d6aynOjlc7Aff324fi0oPKIv7bv6qbmmv9GDLvdW+Uccq5f9ARJyc+vOj7BXzjkMAADTXl8cibhyvtjtqr+qWUjxUt99/87mh3oj4X0Rsi4j/5+2XByMq+z4cEY/UHdO9hFmA8pzlYvvnx648Ud9cbZqs/fd8Prc1u/03U/LetnypuxJ/R3LqzNjovvyc9EVHZ7Y8UPzomWG1r1746cNG+Zfr2n/ZK8u/1hbMy/Fb+5wBupGhiaF7jbvm9rXKib1ajD+J9qSWitgeETtW8PnZOTvzzGe7Gm2fFX8WZyH+Dxp/ePsKCjRH+knE09XrPxVz4o98/i+pzE+ee6t//PKV587Uz08OHD40eLB/c4yN7uuv3RVF3/1w/eU8WehGLHD9a1VjVSfSsuv/n3nv/5mZy94sNTNfO778PK7futGwT7PS+39T8molXZufvTQ0MXFxIGJTMlVcP/jPsZeGumbtn8Xft2f++r8t4q+P8+N2RkR2Ez8aEY9FxO687I9HxBMRsWeB+L85/uSbjbqQi8e/urL4R5Z1/Rsljn4fMf+mtrNff1HI+P1yIf6OaHT9D1RSffmakaGJzYvFtVBJ6xP3fAIBAABgHdgdEVsjKe3NB5q2Rqm0d2/ElpkRlPGJZ09dePv8SPUZgd7oKNVGunrqxkMH8rHhbDk7arBuOdu+vzJunKZp2pUtZ/33se7Whg4b3pYG9T/za/GRFuB+s6x5tEZPtAHr0tz6f2vJRzb/BxnA2mrC72iAdUr9h41ryfV/tZ6CA1pmvvp/NeJuC4oCrLH56v9rhTVH16QswNrS/4eNa+X1348BYL3z/Q8b0pIekl9BYtuJBfZJ2lcn08aJUiz8VwB6I2pram2ahT/wl1JEc0rY1tRIu2Zd09K8+2yOZuQVpUX3aV/GH2JY20Tp31GMaqIzIha5e2dutqu1xJXVLlilEnza2v+dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7t3fAQAA///tUdPr") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5}, 0x38) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 936.812094ms ago: executing program 2 (id=5455): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 899.954507ms ago: executing program 2 (id=5456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 872.852939ms ago: executing program 1 (id=5458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000f97f000000000900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000001780)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000003c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {}, {@noinit_itable}, {@norecovery}, {@discard}, {@noload}, {@usrjquota}, {@oldalloc}, {@grpquota}]}, 0x1, 0x583, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r3, 0x0, 0x3bbc}, 0x18) io_setup(0xffff, &(0x7f0000000080)) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x20, 0xffff, 0x20, 0x1}, 0x48) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) setresuid(0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) lstat(&(0x7f0000000740)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000001280)=@allocspi={0x270, 0x16, 0x100, 0x70bd29, 0x25dfdbfe, {{{@in6=@empty, @in=@local, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x62}, {@in=@broadcast, 0x4d2, 0x6c}, @in=@multicast1, {0x80000000, 0x62c, 0x6, 0x0, 0xa7d0, 0x10000, 0x7f, 0x1}, {0x7, 0x3, 0x2, 0x7}, {0x5, 0xf9, 0x5}, 0x70bd25, 0x3501, 0x2, 0x1, 0x5, 0x40}, 0xad4, 0x5}, [@extra_flags={0x8, 0x18, 0x9}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xa}}, @policy_type={0xa, 0x10, {0x1}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd2b, 0x70bd29, 0x70bd2a, 0x70bd2d, 0x5, [0x0, 0x6, 0x1, 0x0, 0x1000, 0x8, 0xb67, 0x5]}}, @etimer_thresh={0x8, 0xc, 0x7e89}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7fff}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x9, 0x2, 0x0, 0xa0, 0x3b, r6, r7}, {@in=@multicast2, 0x4d6, 0x32}, @in6=@local, {0x80, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3, 0x5, 0x1e, 0xffffffffffffffcc, 0xd11}, {0xb6, 0x5, 0x1, 0x100}, {0x74b, 0xb15, 0x80000001}, 0x70bd26, 0x3502, 0xa, 0x3, 0xc}}]}, 0x270}, 0x1, 0x0, 0x0, 0x1}, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0), 0xb) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 804.362336ms ago: executing program 1 (id=5461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0xd00, &(0x7f0000000180)) 745.096901ms ago: executing program 0 (id=5463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0xd00, &(0x7f0000000180)) 723.268083ms ago: executing program 2 (id=5464): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000000000000000ca86eddf000000000000001000000000000068a02aca8e48b97364bce447dc9f588e203ee43fe31b4547813f40080b28bc8d596e120765496be3ec4506c2"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x9}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000010c0)={@remote}, &(0x7f0000001100)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001140)={'pimreg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000011c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000002440)={0x26c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xfffffffffffffd46}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4880}, 0x41) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) gettid() sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 692.678316ms ago: executing program 1 (id=5465): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000", @ANYRES8=r3, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) syz_clone3(&(0x7f0000000880)={0x100000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@dax_inode}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid}], [{@audit}, {@euid_gt}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5}, 0x38) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 663.029779ms ago: executing program 2 (id=5466): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f00000001c0)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) creat(&(0x7f0000000440)='./file0\x00', 0x0) 631.958462ms ago: executing program 0 (id=5467): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 511.256703ms ago: executing program 1 (id=5468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0xd00, &(0x7f0000000180)) 500.041624ms ago: executing program 0 (id=5469): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 489.915165ms ago: executing program 2 (id=5470): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 424.459261ms ago: executing program 0 (id=5471): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2) ioctl$TCSETSW2(r3, 0x540e, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cpu<00||!') 380.576405ms ago: executing program 1 (id=5472): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11100}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r4, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0x1, 0x70bd2d, 0x0, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x2, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) socket$inet(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) 375.638856ms ago: executing program 3 (id=5473): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f00000001c0)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) creat(&(0x7f0000000440)='./file0\x00', 0x0) 360.659767ms ago: executing program 3 (id=5474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0xd00, &(0x7f0000000180)) 87.431493ms ago: executing program 3 (id=5475): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "697c57fc77c96ef16a25f35ebbe903e746cfc3f0d2aaec9174bd0e7159b9fc96000d05bbbf54c6b4ab119670f947a72f695d945d9e95c38cbcc60200b2304057", 0x1f}, 0x48, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x20000008) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x440, 0x116, 0x2}, 0x18) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='memory.events.local\x00', 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x3b, 0x1, 0x0, 0x0, "a4b948398d6b766ad920a895c341f8a7e12149fd2ed5930cc4174a2a5cdd9d306c68179fd17a3033811c6fb4ec5e998bdca5cbac1331305bf6e459dd70edf14a"}}}}, &(0x7f00000002c0)={0x0, 0x4, [0xf1d, 0xe45, 0xf9b, 0xfe6]}) r4 = request_key(&(0x7f0000000300)='encrypted\x00', 0x0, &(0x7f0000000380)='\x00', r0) r5 = request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='@,[\x00', r0) keyctl$instantiate(0xc, r4, &(0x7f00000003c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '[', 0x20, 0x10}, 0x28, r5) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000004c0)={r4, 0xd4, 0x9e}, &(0x7f0000000500)={'enc=', 'pkcs1', ' hash=', {'blake2b-384\x00'}}, &(0x7f0000000580)="bc0a251a2c230fdbb6c8d192bb6a8d3fdca868c2c0592541d9d8798625532d827bece3d1c64b1db3bdd1d956af4b5424ae417fc706ac66a0e9e985061a040b20948faacf44a6d821dd493e51533324bf0b74551a01b57adcab6b1892fe300a667b6fb6bb7e512c7782d41d9bda49bd2b768aceb67145a9481cbfcf6cedc60bbfa5983f53bb68871a8b2b919a87717240568168c4930140d31f1bbeb8fb6f0e7e9b3e98c6aeabb0ed5f72b096b7a6110e2b3457f087a3e53312536c5320fe3144b5a0b9871093042c8b418555cbb976d12dd48877", &(0x7f0000000680)=""/158) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)=r3}, 0x20) sendmmsg$sock(r3, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000800)="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", 0x1000}], 0x1, &(0x7f0000001840)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}], 0x18}}], 0x1, 0x40004) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001940)={{r3, 0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)='%ps \x00'}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002d00)={r3, 0x20, &(0x7f0000002cc0)={&(0x7f0000001c80)=""/44, 0x2c, 0x0, &(0x7f0000001cc0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x9, 0x12, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000001ac0)='GPL\x00', 0x6, 0xe3, &(0x7f0000001b00)=""/227, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock=0x2, r3, 0x8, &(0x7f0000001c00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001c40)={0x0, 0x0, 0xc07, 0xbeeb}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000002d40)=[r7, 0x1], 0x0, 0x10, 0x8, @void, @value}, 0x94) renameat2(r1, &(0x7f0000002e40)='./file0\x00', r1, &(0x7f0000002e80)='./file0\x00', 0x4) add_key(&(0x7f0000002ec0)='keyring\x00', &(0x7f0000002f00)={'syz', 0x0}, &(0x7f0000002f40)="aea85e17dff9056b1f99821fa1498cd48664899e00a590d2ec9f336856823ccaff44da66e8e8a27bca1d4692cc706bbc3e960e8538363a9650cc630c766a03d5cd3f56792aa58e700d5547dbaa5dded7a0e2de9fdf20320b36bb25ea4caedb8c1cc4caaf0bae14a739e5a839c11a80e241eb2e98b24d87c38195555c814f383deb53fcb95264abb87be06068918015bed297b0a153186426783d5af725de998cb6371a179fe12519bc229b39777c88b478ddbcd3787c976624958dbbc6f8f9", 0xbf, r4) ioctl$int_in(r6, 0x5452, &(0x7f0000003000)=0x100000000) getsockname$netlink(r3, &(0x7f0000003040), &(0x7f0000003080)=0xc) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r9 = semget$private(0x0, 0x1, 0x204) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f00000031c0)=0x7) r10 = add_key$keyring(&(0x7f0000003280), &(0x7f00000032c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000003200), &(0x7f0000003240)={'syz', 0x0}, 0x0, 0x0, r10) semctl$GETALL(r9, 0x0, 0xd, &(0x7f0000003300)=""/227) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000003400)=[{r7, 0x2000}, {r7, 0x4009}, {r3, 0x101}, {r11, 0x2004}], 0x4, &(0x7f0000003440)={0x77359400}, &(0x7f0000003480)={[0x9fdc]}, 0x8) 50.155496ms ago: executing program 3 (id=5476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 28.812718ms ago: executing program 3 (id=5477): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0xb4}}, 0x0) 27.970948ms ago: executing program 1 (id=5478): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000", @ANYRES8=r3, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) syz_clone3(&(0x7f0000000880)={0x100000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@dax_inode}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid}], [{@audit}, {@euid_gt}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5}, 0x38) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 21.273489ms ago: executing program 0 (id=5479): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 0s ago: executing program 0 (id=5480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000f97f000000000900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000001780)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000003c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {}, {@noinit_itable}, {@norecovery}, {@discard}, {@noload}, {@usrjquota}, {@oldalloc}, {@grpquota}]}, 0x1, 0x583, &(0x7f0000000cc0)="$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") r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r5, 0x0, 0x3bbc}, 0x18) io_setup(0xffff, &(0x7f0000000080)) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x20, 0xffff, 0x20, 0x1}, 0x48) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) setresuid(0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) lstat(&(0x7f0000000740)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000001280)=@allocspi={0x268, 0x16, 0x100, 0x70bd29, 0x25dfdbfe, {{{@in6=@empty, @in=@local, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x62}, {@in=@broadcast, 0x4d2, 0x6c}, @in=@multicast1, {0x80000000, 0x62c, 0x6, 0x0, 0xa7d0, 0x10000, 0x7f, 0x1}, {0x7, 0x3, 0x2, 0x7}, {0x5, 0xf9, 0x5}, 0x70bd25, 0x3501, 0x2, 0x1, 0x5, 0x40}, 0xad4, 0x5}, [@extra_flags={0x8, 0x18, 0x9}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xa}}, @policy_type={0xa, 0x10, {0x1}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd2b, 0x70bd29, 0x70bd2a, 0x70bd2d, 0x5, [0x0, 0x6, 0x1, 0x0, 0x1000, 0x8, 0xb67, 0x5]}}, @etimer_thresh={0x8, 0xc, 0x7e89}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7fff}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x9, 0x2, 0x0, 0xa0, 0x3b, r8, r9}, {@in=@multicast2, 0x4d6, 0x32}, @in6=@local, {0x80, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3, 0x5, 0x1e, 0xffffffffffffffcc, 0xd11}, {0xb6, 0x5, 0x1, 0x100}, {0x74b, 0xb15, 0x80000001}, 0x70bd26, 0x3502, 0xa, 0x3, 0xc}}]}, 0x268}, 0x1, 0x0, 0x0, 0x1}, 0x4000) write$binfmt_script(r3, &(0x7f00000002c0), 0xb) fallocate(r7, 0x20, 0x0, 0x10000) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) kernel console output (not intermixed with test programs): 072] RSP: 002b:00007fabf00e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.896807][T17072] RAX: ffffffffffffffda RBX: 00007fabf1625f80 RCX: 00007fabf146def9 [ 201.904832][T17072] RDX: 000000000000275a RSI: 0000000020000080 RDI: ffffffffffffff9c [ 201.912832][T17072] RBP: 00007fabf00e1090 R08: 0000000000000000 R09: 0000000000000000 [ 201.920853][T17072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.928839][T17072] R13: 0000000000000000 R14: 00007fabf1625f80 R15: 00007fff11ce6588 [ 201.936873][T17072] [ 202.673752][T17113] Cannot find set identified by id 0 to match [ 202.695196][T17117] siw: device registration error -23 [ 202.744985][T17121] netlink: 'syz.1.4167': attribute type 1 has an invalid length. [ 202.763737][T17121] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 202.772623][T17121] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 202.789101][T17121] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 202.803042][T17121] bond1 (unregistering): Released all slaves [ 203.624766][T17177] vlan2: entered allmulticast mode [ 203.635504][T17159] lo speed is unknown, defaulting to 1000 [ 203.641530][T17159] caif0 speed is unknown, defaulting to 1000 [ 203.716663][T17159] chnl_net:caif_netlink_parms(): no params data found [ 203.749487][T17159] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.756570][T17159] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.763745][T17159] bridge_slave_0: entered allmulticast mode [ 203.770185][T17159] bridge_slave_0: entered promiscuous mode [ 203.777233][T17159] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.784875][T17159] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.795089][T17159] bridge_slave_1: entered allmulticast mode [ 203.801464][T17159] bridge_slave_1: entered promiscuous mode [ 203.840940][T17159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.852024][T17159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.875882][T17159] team0: Port device team_slave_0 added [ 203.882524][T17159] team0: Port device team_slave_1 added [ 203.898337][T17159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.905315][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.931253][T17159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.942728][T17159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.949743][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.975647][T17159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.002050][T17159] hsr_slave_0: entered promiscuous mode [ 204.008444][T17159] hsr_slave_1: entered promiscuous mode [ 204.014445][T17159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.022097][T17159] Cannot create hsr debugfs directory [ 204.058207][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 204.058218][ T29] audit: type=1326 audit(1726876563.220:21466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.088041][ T29] audit: type=1326 audit(1726876563.220:21467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.111894][ T29] audit: type=1326 audit(1726876563.220:21468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.135524][ T29] audit: type=1326 audit(1726876563.220:21469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.159186][ T29] audit: type=1326 audit(1726876563.220:21470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.182730][ T29] audit: type=1326 audit(1726876563.220:21471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.206432][ T29] audit: type=1326 audit(1726876563.220:21472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.229981][ T29] audit: type=1326 audit(1726876563.220:21473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.253656][ T29] audit: type=1326 audit(1726876563.220:21474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.277245][ T29] audit: type=1326 audit(1726876563.220:21475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf146def9 code=0x7ffc0000 [ 204.314825][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'. [ 204.370685][T17159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.389464][T17208] bridge0: port 3(vlan2) entered blocking state [ 204.395751][T17208] bridge0: port 3(vlan2) entered disabled state [ 204.402062][T17208] vlan2: entered allmulticast mode [ 204.407626][T17208] vlan2: left allmulticast mode [ 204.467359][T17159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.529294][T17159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.592005][T17159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.656872][T17159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.665374][T17159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.673633][T17159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.682073][T17159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.720163][T17159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.732742][T17159] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.742109][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.749196][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.759757][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.766818][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.835275][T17159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.946213][T17159] veth0_vlan: entered promiscuous mode [ 204.956210][T17159] veth1_vlan: entered promiscuous mode [ 204.972286][T17159] veth0_macvtap: entered promiscuous mode [ 204.979513][T17159] veth1_macvtap: entered promiscuous mode [ 204.989540][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.000015][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.009880][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.020365][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.030249][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.040675][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.050483][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.060901][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.070978][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.081583][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.091401][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.101869][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.111687][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.122104][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.132031][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.142442][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.152251][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.162752][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.172650][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.183304][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.194700][T17159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.204637][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.215135][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.225120][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.235560][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.245361][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.255869][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.265676][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.276089][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.285966][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.296374][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.306184][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.316610][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.326458][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.336879][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.346679][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.357088][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.366973][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.377515][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.387385][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.397825][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.409313][T17159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.418080][T17159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.426865][T17159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.435576][T17159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.444353][T17159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.707546][T17257] bridge0: port 3(vlan2) entered blocking state [ 205.714731][T17257] bridge0: port 3(vlan2) entered disabled state [ 205.721188][T17257] vlan2: entered allmulticast mode [ 205.726764][T17257] vlan2: left allmulticast mode [ 205.791487][T17254] lo speed is unknown, defaulting to 1000 [ 205.797596][T17254] caif0 speed is unknown, defaulting to 1000 [ 205.950214][T17254] chnl_net:caif_netlink_parms(): no params data found [ 206.006277][T17254] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.013481][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.021212][T17254] bridge_slave_0: entered allmulticast mode [ 206.029149][T17254] bridge_slave_0: entered promiscuous mode [ 206.040306][T17254] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.047361][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.059461][T17254] bridge_slave_1: entered allmulticast mode [ 206.068171][T17254] bridge_slave_1: entered promiscuous mode [ 206.106323][T17295] netlink: 'syz.1.4220': attribute type 1 has an invalid length. [ 206.139735][T17254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.169687][T17295] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 206.178537][T17295] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 206.193595][T17254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.225613][T17254] team0: Port device team_slave_0 added [ 206.232531][T17254] team0: Port device team_slave_1 added [ 206.248594][T17295] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 206.265311][T17295] bond1 (unregistering): Released all slaves [ 206.333416][T17254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.340458][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.366571][T17254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.389505][T17254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.396515][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.422423][T17254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.452299][T17254] hsr_slave_0: entered promiscuous mode [ 206.459192][T17254] hsr_slave_1: entered promiscuous mode [ 206.465114][T17254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.472688][T17254] Cannot create hsr debugfs directory [ 206.532255][T17254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.607549][T17254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.668113][T17254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.718240][T17254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.797556][T17254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.805898][T17254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.814229][T17254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.822973][T17254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.858459][T17254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.870793][T17254] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.880043][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.887104][ T5807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.897832][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.904974][ T5807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.966483][T17254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.029565][T17254] veth0_vlan: entered promiscuous mode [ 207.039109][T17254] veth1_vlan: entered promiscuous mode [ 207.057903][T17254] veth0_macvtap: entered promiscuous mode [ 207.065995][T17254] veth1_macvtap: entered promiscuous mode [ 207.076886][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.087379][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.097225][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.107739][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.117719][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.128204][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.138128][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.148552][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.158388][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.169008][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.178845][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.189448][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.199272][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.209828][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.219676][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.230114][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.240040][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.250519][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.260349][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.279094][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.288922][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.299429][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.312218][T17254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.323035][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.333529][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.343445][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.353917][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.363967][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.374460][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.384272][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.394767][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.404601][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.415010][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.424899][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.435353][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.445236][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.455666][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.465634][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.476056][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.485858][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.496261][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.506139][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.516627][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.526450][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.536919][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.548691][T17254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.562298][T17254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.571055][T17254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.579863][T17254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.588607][T17254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.493842][T17343] tipc: Failed to obtain node identity [ 208.499361][T17343] tipc: Enabling of bearer rejected, failed to enable media [ 209.078959][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 209.078974][ T29] audit: type=1326 audit(1726877848.235:21650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.110034][ T29] audit: type=1326 audit(1726877848.235:21651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.133627][ T29] audit: type=1326 audit(1726877848.235:21652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.157251][ T29] audit: type=1326 audit(1726877848.235:21653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.180875][ T29] audit: type=1326 audit(1726877848.235:21654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.204405][ T29] audit: type=1326 audit(1726877848.235:21655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.228034][ T29] audit: type=1326 audit(1726877848.235:21656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.251516][ T29] audit: type=1326 audit(1726877848.235:21657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.275130][ T29] audit: type=1326 audit(1726877848.235:21658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.298593][ T29] audit: type=1326 audit(1726877848.235:21659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 209.375422][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4240'. [ 209.384423][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4240'. [ 209.414334][T17367] syz.1.4242[17367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.414382][T17367] syz.1.4242[17367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.431325][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4242'. [ 209.522001][T17372] 9pnet_fd: Insufficient options for proto=fd [ 209.538212][T17377] syz.1.4245[17377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.538273][T17377] syz.1.4245[17377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.568637][T17379] bridge0: port 3(vlan2) entered blocking state [ 209.586445][T17379] bridge0: port 3(vlan2) entered disabled state [ 209.592916][T17379] vlan2: entered allmulticast mode [ 209.598465][T17379] vlan2: left allmulticast mode [ 210.571652][T17405] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4256'. [ 210.580643][T17405] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4256'. [ 210.593279][T17407] bridge0: port 3(vlan2) entered blocking state [ 210.599738][T17407] bridge0: port 3(vlan2) entered disabled state [ 210.606356][T17407] vlan2: entered allmulticast mode [ 210.612193][T17407] vlan2: left allmulticast mode [ 211.735253][T17447] 9pnet: Could not find request transport: xen [ 212.666007][T17505] netlink: 'syz.4.4289': attribute type 1 has an invalid length. [ 212.685274][T17505] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 212.692906][T17505] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 212.706979][T17505] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 212.717076][T17505] bond1 (unregistering): Released all slaves [ 212.991167][T17523] FAULT_INJECTION: forcing a failure. [ 212.991167][T17523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.004359][T17523] CPU: 1 UID: 0 PID: 17523 Comm: syz.3.4294 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 213.016246][T17523] Tainted: [W]=WARN [ 213.020039][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 213.030082][T17523] Call Trace: [ 213.033361][T17523] [ 213.036309][T17523] dump_stack_lvl+0xf2/0x150 [ 213.040888][T17523] dump_stack+0x15/0x20 [ 213.045052][T17523] should_fail_ex+0x229/0x230 [ 213.049725][T17523] should_fail+0xb/0x10 [ 213.053868][T17523] should_fail_usercopy+0x1a/0x20 [ 213.058870][T17523] _copy_from_user+0x1e/0xd0 [ 213.063441][T17523] copy_msghdr_from_user+0x54/0x2a0 [ 213.068633][T17523] __sys_sendmsg+0x171/0x270 [ 213.073348][T17523] __x64_sys_sendmsg+0x46/0x50 [ 213.078170][T17523] x64_sys_call+0x2689/0x2d60 [ 213.082840][T17523] do_syscall_64+0xc9/0x1c0 [ 213.087356][T17523] ? clear_bhb_loop+0x55/0xb0 [ 213.092066][T17523] ? clear_bhb_loop+0x55/0xb0 [ 213.096792][T17523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.102680][T17523] RIP: 0033:0x7f74fc44def9 [ 213.107081][T17523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.126725][T17523] RSP: 002b:00007f74fb0c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.135197][T17523] RAX: ffffffffffffffda RBX: 00007f74fc605f80 RCX: 00007f74fc44def9 [ 213.143169][T17523] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 213.151173][T17523] RBP: 00007f74fb0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 213.159129][T17523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.167179][T17523] R13: 0000000000000000 R14: 00007f74fc605f80 R15: 00007ffd67004eb8 [ 213.175213][T17523] [ 213.295927][T17531] FAULT_INJECTION: forcing a failure. [ 213.295927][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 213.308644][T17531] CPU: 0 UID: 0 PID: 17531 Comm: syz.3.4298 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 213.320528][T17531] Tainted: [W]=WARN [ 213.324306][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 213.334343][T17531] Call Trace: [ 213.337618][T17531] [ 213.340539][T17531] dump_stack_lvl+0xf2/0x150 [ 213.345143][T17531] dump_stack+0x15/0x20 [ 213.349282][T17531] should_fail_ex+0x229/0x230 [ 213.354078][T17531] ? vm_area_dup+0x98/0x130 [ 213.358598][T17531] should_failslab+0x8f/0xb0 [ 213.363251][T17531] kmem_cache_alloc_noprof+0x4c/0x290 [ 213.368610][T17531] vm_area_dup+0x98/0x130 [ 213.372919][T17531] __split_vma+0xf7/0x690 [ 213.377237][T17531] do_vmi_align_munmap+0x227/0xa60 [ 213.382343][T17531] do_vmi_munmap+0x1fb/0x250 [ 213.386996][T17531] do_munmap+0x7a/0xb0 [ 213.391047][T17531] __se_sys_mremap+0xab6/0xf10 [ 213.395890][T17531] ? fput+0x14e/0x190 [ 213.399877][T17531] __x64_sys_mremap+0x67/0x80 [ 213.404551][T17531] x64_sys_call+0x2747/0x2d60 [ 213.409223][T17531] do_syscall_64+0xc9/0x1c0 [ 213.413708][T17531] ? clear_bhb_loop+0x55/0xb0 [ 213.418439][T17531] ? clear_bhb_loop+0x55/0xb0 [ 213.423114][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.429003][T17531] RIP: 0033:0x7f74fc44def9 [ 213.433442][T17531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.453141][T17531] RSP: 002b:00007f74fb0c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 213.461532][T17531] RAX: ffffffffffffffda RBX: 00007f74fc605f80 RCX: 00007f74fc44def9 [ 213.469481][T17531] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000000020a96000 [ 213.477439][T17531] RBP: 00007f74fb0c1090 R08: 0000000020000000 R09: 0000000000000000 [ 213.485465][T17531] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 213.493427][T17531] R13: 0000000000000000 R14: 00007f74fc605f80 R15: 00007ffd67004eb8 [ 213.501417][T17531] [ 213.548113][T17541] bridge0: port 3(vlan2) entered blocking state [ 213.554455][T17541] bridge0: port 3(vlan2) entered disabled state [ 213.560878][T17541] vlan2: entered allmulticast mode [ 213.566340][T17541] vlan2: left allmulticast mode [ 213.635231][T17544] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 213.658865][T17544] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 213.769949][T17557] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4308'. [ 213.780495][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4308'. [ 213.789722][T17557] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 213.876694][T17576] FAULT_INJECTION: forcing a failure. [ 213.876694][T17576] name failslab, interval 1, probability 0, space 0, times 0 [ 213.889448][T17576] CPU: 0 UID: 0 PID: 17576 Comm: syz.4.4314 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 213.901397][T17576] Tainted: [W]=WARN [ 213.905267][T17576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 213.915307][T17576] Call Trace: [ 213.918569][T17576] [ 213.921484][T17576] dump_stack_lvl+0xf2/0x150 [ 213.926088][T17576] dump_stack+0x15/0x20 [ 213.930278][T17576] should_fail_ex+0x229/0x230 [ 213.934943][T17576] ? audit_log_start+0x34c/0x6b0 [ 213.939869][T17576] should_failslab+0x8f/0xb0 [ 213.944450][T17576] kmem_cache_alloc_noprof+0x4c/0x290 [ 213.949824][T17576] audit_log_start+0x34c/0x6b0 [ 213.954673][T17576] audit_seccomp+0x4b/0x130 [ 213.959162][T17576] __seccomp_filter+0x6fa/0x1180 [ 213.964097][T17576] ? proc_fail_nth_write+0x12a/0x150 [ 213.969408][T17576] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 213.975073][T17576] ? vfs_write+0x580/0x910 [ 213.979505][T17576] __secure_computing+0x9f/0x1c0 [ 213.984433][T17576] syscall_trace_enter+0xd1/0x1f0 [ 213.989529][T17576] do_syscall_64+0xaa/0x1c0 [ 213.994034][T17576] ? clear_bhb_loop+0x55/0xb0 [ 213.998704][T17576] ? clear_bhb_loop+0x55/0xb0 [ 214.003427][T17576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.009336][T17576] RIP: 0033:0x7f103554def9 [ 214.013734][T17576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.033381][T17576] RSP: 002b:00007f10341c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 214.041804][T17576] RAX: ffffffffffffffda RBX: 00007f1035705f80 RCX: 00007f103554def9 [ 214.049853][T17576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.057815][T17576] RBP: 00007f10341c7090 R08: 0000000000001000 R09: 0000000000000000 [ 214.065848][T17576] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 214.073828][T17576] R13: 0000000000000000 R14: 00007f1035705f80 R15: 00007ffdc6d1ffc8 [ 214.081795][T17576] [ 214.084959][T17576] audit_log_lost: 429 callbacks suppressed [ 214.084971][T17576] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 214.098988][T17576] audit: out of memory in audit_log_start [ 214.110251][ T29] audit: type=1326 audit(1726878621.271:22089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f103554c93c code=0x7ffc0000 [ 214.133717][ T29] audit: type=1326 audit(1726878621.271:22090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f103554c9df code=0x7ffc0000 [ 214.157156][ T29] audit: type=1326 audit(1726878621.271:22091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f103554cb8a code=0x7ffc0000 [ 214.180681][ T29] audit: type=1326 audit(1726878621.271:22092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103554def9 code=0x7ffc0000 [ 214.204414][ T29] audit: type=1326 audit(1726878621.271:22093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103554def9 code=0x7ffc0000 [ 214.245940][T17580] lo speed is unknown, defaulting to 1000 [ 214.251910][T17580] caif0 speed is unknown, defaulting to 1000 [ 214.251965][T17592] FAULT_INJECTION: forcing a failure. [ 214.251965][T17592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.259330][T17590] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 214.270972][T17592] CPU: 1 UID: 0 PID: 17592 Comm: syz.4.4318 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 214.292411][T17592] Tainted: [W]=WARN [ 214.296284][T17592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 214.306391][T17592] Call Trace: [ 214.309792][T17592] [ 214.312716][T17592] dump_stack_lvl+0xf2/0x150 [ 214.317394][T17592] dump_stack+0x15/0x20 [ 214.321631][T17592] should_fail_ex+0x229/0x230 [ 214.326306][T17592] should_fail+0xb/0x10 [ 214.330488][T17592] should_fail_usercopy+0x1a/0x20 [ 214.335568][T17592] _copy_from_user+0x1e/0xd0 [ 214.340311][T17592] kstrtouint_from_user+0x76/0xe0 [ 214.345408][T17592] ? 0xffffffff81000000 [ 214.349563][T17592] proc_fail_nth_write+0x4f/0x150 [ 214.354648][T17592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 214.359089][T17590] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 214.360307][T17592] vfs_write+0x26c/0x910 [ 214.373150][T17592] ? __fget_files+0x1d4/0x210 [ 214.377909][T17592] ksys_write+0xeb/0x1b0 [ 214.382184][T17592] __x64_sys_write+0x42/0x50 [ 214.386916][T17592] x64_sys_call+0x27dd/0x2d60 [ 214.391608][T17592] do_syscall_64+0xc9/0x1c0 [ 214.396157][T17592] ? clear_bhb_loop+0x55/0xb0 [ 214.400843][T17592] ? clear_bhb_loop+0x55/0xb0 [ 214.405607][T17592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.407001][T17580] chnl_net:caif_netlink_parms(): no params data found [ 214.411534][T17592] RIP: 0033:0x7f103554c9df [ 214.411552][T17592] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 214.442378][T17592] RSP: 002b:00007f10341c7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 214.442399][T17592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f103554c9df [ 214.442411][T17592] RDX: 0000000000000001 RSI: 00007f10341c70a0 RDI: 0000000000000008 [ 214.466741][T17592] RBP: 00007f10341c7090 R08: 0000000000000000 R09: 0000000000000000 [ 214.466755][T17592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 214.466768][T17592] R13: 0000000000000000 R14: 00007f1035705f80 R15: 00007ffdc6d1ffc8 [ 214.490664][T17592] [ 214.506911][ T29] audit: type=1326 audit(1726878621.641:22094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc44def9 code=0x7ffc0000 [ 214.530568][ T29] audit: type=1326 audit(1726878621.641:22095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc44def9 code=0x7ffc0000 [ 214.554226][ T29] audit: type=1326 audit(1726878621.641:22096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fc44def9 code=0x7ffc0000 [ 214.614942][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.622104][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.634031][T17580] bridge_slave_0: entered allmulticast mode [ 214.640510][T17580] bridge_slave_0: entered promiscuous mode [ 214.647849][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.654907][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.662214][T17580] bridge_slave_1: entered allmulticast mode [ 214.669965][T17580] bridge_slave_1: entered promiscuous mode [ 214.692574][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.703661][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.724007][T17580] team0: Port device team_slave_0 added [ 214.730769][T17580] team0: Port device team_slave_1 added [ 214.750634][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.757606][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.783590][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.797690][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.804679][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.819261][T17625] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 214.830665][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.852348][T17620] lo speed is unknown, defaulting to 1000 [ 214.864267][T17620] caif0 speed is unknown, defaulting to 1000 [ 214.872888][T17625] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 214.884734][T17580] hsr_slave_0: entered promiscuous mode [ 214.898989][T17580] hsr_slave_1: entered promiscuous mode [ 214.908063][T17580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.915921][T17580] Cannot create hsr debugfs directory [ 215.006972][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4332'. [ 215.018821][T17580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.077493][T17580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.136696][T17580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.197177][T17580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.277859][T17580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.279175][T17650] syz.4.4336[17650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.284627][T17650] syz.4.4336[17650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.301926][T17580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.321215][T17650] FAULT_INJECTION: forcing a failure. [ 215.321215][T17650] name failslab, interval 1, probability 0, space 0, times 0 [ 215.333851][T17650] CPU: 0 UID: 0 PID: 17650 Comm: syz.4.4336 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 215.345939][T17650] Tainted: [W]=WARN [ 215.349763][T17650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.359804][T17650] Call Trace: [ 215.363102][T17650] [ 215.366018][T17650] dump_stack_lvl+0xf2/0x150 [ 215.370635][T17650] dump_stack+0x15/0x20 [ 215.374785][T17650] should_fail_ex+0x229/0x230 [ 215.379516][T17650] ? __se_sys_mbind+0x422/0x1160 [ 215.384447][T17650] should_failslab+0x8f/0xb0 [ 215.389031][T17650] kmem_cache_alloc_noprof+0x4c/0x290 [ 215.394393][T17650] __se_sys_mbind+0x422/0x1160 [ 215.399214][T17650] ? fput+0x14e/0x190 [ 215.403191][T17650] ? ksys_write+0x178/0x1b0 [ 215.407682][T17650] __x64_sys_mbind+0x78/0x90 [ 215.412320][T17650] x64_sys_call+0x2b4d/0x2d60 [ 215.417012][T17650] do_syscall_64+0xc9/0x1c0 [ 215.421502][T17650] ? clear_bhb_loop+0x55/0xb0 [ 215.426191][T17650] ? clear_bhb_loop+0x55/0xb0 [ 215.430861][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.436786][T17650] RIP: 0033:0x7f103554def9 [ 215.441186][T17650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.460805][T17650] RSP: 002b:00007f10341c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 215.469204][T17650] RAX: ffffffffffffffda RBX: 00007f1035705f80 RCX: 00007f103554def9 [ 215.477163][T17650] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000000020000000 [ 215.485141][T17650] RBP: 00007f10341c7090 R08: 0000000000000000 R09: 0000000000000002 [ 215.493127][T17650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.501163][T17650] R13: 0000000000000000 R14: 00007f1035705f80 R15: 00007ffdc6d1ffc8 [ 215.509159][T17650] [ 215.524906][T17580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.540599][T17656] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 215.542140][T17580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.567092][T17656] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 215.588459][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.595532][T17580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.602816][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.609877][T17580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.619048][T17662] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4341'. [ 215.636052][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.643800][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.683268][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.696584][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.710893][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.718019][ T5807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.733695][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.740749][ T5807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.769530][T17580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.780000][T17580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.853325][T17580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.923106][T17580] veth0_vlan: entered promiscuous mode [ 215.931848][T17580] veth1_vlan: entered promiscuous mode [ 215.950416][T17580] veth0_macvtap: entered promiscuous mode [ 215.958424][T17580] veth1_macvtap: entered promiscuous mode [ 215.969341][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.979936][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.989758][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.000170][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.010079][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.020483][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.030325][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.040839][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.050632][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.061039][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.070828][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.081320][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.091193][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.101659][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.111483][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.121901][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.131754][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.142178][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.152006][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.162489][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.172478][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.182905][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.186819][T17707] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 216.192788][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.212716][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.230232][T17580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.248759][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.259306][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.269170][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.279649][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.289557][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.299985][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.309828][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.320258][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.325744][T17707] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 216.330118][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.349116][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.358940][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.369403][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.379242][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.389806][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.399634][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.410058][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.419880][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.430321][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.440200][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.450630][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.460452][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.470959][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.480850][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.491266][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.504219][T17580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.513540][T17580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.522255][T17580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.531059][T17580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.539857][T17580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.649500][T17735] netlink: 'syz.1.4357': attribute type 1 has an invalid length. [ 216.680523][T17735] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 216.688344][T17735] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 216.699179][T17708] lo speed is unknown, defaulting to 1000 [ 216.706833][T17735] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 216.717441][T17735] bond1 (unregistering): Released all slaves [ 216.726574][T17708] caif0 speed is unknown, defaulting to 1000 [ 216.812462][T17708] chnl_net:caif_netlink_parms(): no params data found [ 216.855705][T17708] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.862867][T17708] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.870236][T17708] bridge_slave_0: entered allmulticast mode [ 216.876639][T17708] bridge_slave_0: entered promiscuous mode [ 216.883656][T17708] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.890761][T17708] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.898111][T17708] bridge_slave_1: entered allmulticast mode [ 216.905076][T17708] bridge_slave_1: entered promiscuous mode [ 216.924889][T17756] netlink: 'syz.3.4361': attribute type 21 has an invalid length. [ 216.932786][T17756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4361'. [ 216.946157][T17708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.956757][T17708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.977688][T17708] team0: Port device team_slave_0 added [ 216.984357][T17708] team0: Port device team_slave_1 added [ 217.002951][T17708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.010020][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.035975][T17708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.047326][T17708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.054412][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.080400][T17708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.093560][T17758] netlink: 'syz.3.4362': attribute type 1 has an invalid length. [ 217.116283][T17758] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 217.124138][T17758] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 217.139700][T17758] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 217.149843][T17758] bond1 (unregistering): Released all slaves [ 217.161223][T17708] hsr_slave_0: entered promiscuous mode [ 217.167371][T17708] hsr_slave_1: entered promiscuous mode [ 217.173283][T17708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.180893][T17708] Cannot create hsr debugfs directory [ 217.261309][T17708] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.328586][T17708] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.387853][T17708] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.544405][T17708] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.556316][T17781] FAULT_INJECTION: forcing a failure. [ 217.556316][T17781] name failslab, interval 1, probability 0, space 0, times 0 [ 217.568941][T17781] CPU: 1 UID: 0 PID: 17781 Comm: syz.4.4368 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 217.580895][T17781] Tainted: [W]=WARN [ 217.584750][T17781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.594794][T17781] Call Trace: [ 217.598065][T17781] [ 217.601012][T17781] dump_stack_lvl+0xf2/0x150 [ 217.605610][T17781] dump_stack+0x15/0x20 [ 217.609800][T17781] should_fail_ex+0x229/0x230 [ 217.614487][T17781] ? __se_sys_getcwd+0x44/0x3d0 [ 217.619402][T17781] should_failslab+0x8f/0xb0 [ 217.624125][T17781] kmem_cache_alloc_noprof+0x4c/0x290 [ 217.629529][T17781] __se_sys_getcwd+0x44/0x3d0 [ 217.634254][T17781] ? ksys_write+0x178/0x1b0 [ 217.638823][T17781] __x64_sys_getcwd+0x31/0x40 [ 217.643505][T17781] x64_sys_call+0x1e9a/0x2d60 [ 217.648279][T17781] do_syscall_64+0xc9/0x1c0 [ 217.652818][T17781] ? clear_bhb_loop+0x55/0xb0 [ 217.657517][T17781] ? clear_bhb_loop+0x55/0xb0 [ 217.662271][T17781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.668222][T17781] RIP: 0033:0x7f103554def9 [ 217.672634][T17781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.692264][T17781] RSP: 002b:00007f1034185038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 217.700681][T17781] RAX: ffffffffffffffda RBX: 00007f1035706130 RCX: 00007f103554def9 [ 217.708670][T17781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.716640][T17781] RBP: 00007f1034185090 R08: 0000000000000000 R09: 0000000000000000 [ 217.724607][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.732575][T17781] R13: 0000000000000000 R14: 00007f1035706130 R15: 00007ffdc6d1ffc8 [ 217.740552][T17781] [ 218.208657][T17784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.362780][T17708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.416116][T17708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.454748][T17708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.470460][T17708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.483030][T17796] rdma_op ffff888134738580 conn xmit_rdma 0000000000000000 [ 218.530609][T17801] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.538834][T17708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.560713][T17708] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.571110][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.572962][T17801] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 218.578218][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.603416][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.610578][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.702186][T17708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.797848][T17708] veth0_vlan: entered promiscuous mode [ 218.807390][T17708] veth1_vlan: entered promiscuous mode [ 218.823755][T17708] veth0_macvtap: entered promiscuous mode [ 218.831355][T17708] veth1_macvtap: entered promiscuous mode [ 218.875375][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.877537][T17836] rdma_op ffff888134739180 conn xmit_rdma 0000000000000000 [ 218.885836][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.885848][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.885862][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.885872][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.885885][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.885939][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.953942][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.963738][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.974176][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.984087][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.994522][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.004426][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.014852][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.024698][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.035192][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.045030][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.055461][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.065293][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.075756][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.085603][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.096090][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.105979][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.116532][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.129632][T17708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.138138][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.149048][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.159032][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.169462][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.179280][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.189711][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.199535][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.209967][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.219774][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.230213][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.240177][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.250610][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.260496][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.270921][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.280831][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.291288][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.301256][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.311684][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.321499][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.331924][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.341735][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.352189][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.361993][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.372405][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.382274][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.392828][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.424469][T17708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.450174][T17708] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.458966][T17708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.467798][T17708] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.476616][T17708] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.529966][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 219.529981][ T29] audit: type=1326 audit(1726880418.677:22323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.559923][ T29] audit: type=1326 audit(1726880418.677:22324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.583638][ T29] audit: type=1326 audit(1726880418.677:22325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.607235][ T29] audit: type=1326 audit(1726880418.677:22326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.631116][ T29] audit: type=1326 audit(1726880418.677:22327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.654694][ T29] audit: type=1326 audit(1726880418.677:22328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.678507][ T29] audit: type=1326 audit(1726880418.677:22329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.702096][ T29] audit: type=1326 audit(1726880418.677:22330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.726036][ T29] audit: type=1326 audit(1726880418.677:22331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.749755][ T29] audit: type=1326 audit(1726880418.677:22332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 219.904652][T17867] rdma_op ffff88810cfe1180 conn xmit_rdma 0000000000000000 [ 220.050846][T17886] netlink: 'syz.3.4404': attribute type 1 has an invalid length. [ 220.083583][T17886] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 220.092130][T17886] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 220.130398][T17886] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 220.142087][T17886] bond1 (unregistering): Released all slaves [ 220.550797][T17906] rdma_op ffff88813225b180 conn xmit_rdma 0000000000000000 [ 220.927567][T17928] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4419'. [ 220.936609][T17928] 0ªX¹¦À: renamed from caif0 [ 220.942562][T17928] 0ªX¹¦À: entered allmulticast mode [ 220.947799][T17928] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 221.374874][T17970] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 221.410044][T17970] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 221.443850][T17978] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 221.480346][T17978] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 221.585839][T17993] rdma_op ffff88812f748180 conn xmit_rdma 0000000000000000 [ 221.719483][T18004] rdma_op ffff88812f748180 conn xmit_rdma 0000000000000000 [ 221.858121][T18026] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 221.896670][T18026] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 222.442762][T18087] rdma_op ffff88810b91e980 conn xmit_rdma 0000000000000000 [ 222.456770][T18083] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0200:0000 with DS=0xd [ 222.581562][T18098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=18098 comm=syz.3.4486 [ 222.589540][T18100] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 222.628774][T18100] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 222.912138][T18130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=18130 comm=syz.1.4499 [ 222.934013][T18128] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0200:0000 with DS=0xd [ 223.060804][T18144] rdma_op ffff88810b91dd80 conn xmit_rdma 0000000000000000 [ 223.065117][T18142] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 223.122998][T18142] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 223.215914][T18164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=18164 comm=syz.4.4512 [ 223.272471][T18172] netlink: 'syz.4.4515': attribute type 1 has an invalid length. [ 223.297203][T18169] lo speed is unknown, defaulting to 1000 [ 223.303211][T18169] caif0 speed is unknown, defaulting to 1000 [ 223.307826][T18172] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 223.325513][T18172] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 223.358378][T18182] rdma_op ffff88813683d580 conn xmit_rdma 0000000000000000 [ 223.370963][T18172] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 223.382519][T18172] bond1 (unregistering): Released all slaves [ 223.553735][T18209] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 223.575449][T18209] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 223.583095][T18209] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 223.598906][T18209] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 223.614182][T18209] bond1 (unregistering): Released all slaves [ 223.818321][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4539'. [ 223.922202][T18240] syzkaller0: entered allmulticast mode [ 223.929384][T18240] Cannot find set identified by id 0 to match [ 223.936383][T18239] syzkaller0: left allmulticast mode [ 224.179791][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4554'. [ 224.311644][T18280] syzkaller0: entered allmulticast mode [ 224.319233][T18280] Cannot find set identified by id 0 to match [ 224.326549][T18278] syzkaller0: left allmulticast mode [ 224.363073][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4562'. [ 224.395747][T18297] netlink: 'syz.1.4563': attribute type 1 has an invalid length. [ 224.447861][T18303] netlink: 'syz.2.4567': attribute type 1 has an invalid length. [ 224.473884][T18297] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 224.481840][T18297] bond1: (slave batadv4): Enslaving as a backup interface with an up link [ 224.495189][T18303] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 224.502679][T18303] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 224.513327][T18297] bond1 (unregistering): (slave batadv4): Releasing backup interface [ 224.840001][T18297] bond1 (unregistering): Released all slaves [ 224.853365][T18303] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 224.864878][T18303] bond1 (unregistering): Released all slaves [ 224.911475][T18317] lo speed is unknown, defaulting to 1000 [ 224.917635][T18317] caif0 speed is unknown, defaulting to 1000 [ 225.187429][T18326] netlink: 'syz.3.4572': attribute type 1 has an invalid length. [ 225.211241][T18326] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 225.220509][T18326] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 225.245515][T18326] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 225.256102][T18326] bond1 (unregistering): Released all slaves [ 225.425450][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 225.551417][T18349] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 225.579368][T18354] syzkaller0: entered promiscuous mode [ 225.601348][T18354] syzkaller0 (unregistering): left promiscuous mode [ 225.620191][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 225.620205][ T29] audit: type=1326 audit(1726883496.773:22766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.659780][ T29] audit: type=1326 audit(1726883496.813:22767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.683403][ T29] audit: type=1326 audit(1726883496.813:22768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.714797][ T29] audit: type=1326 audit(1726883496.823:22769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.738414][ T29] audit: type=1326 audit(1726883496.823:22770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.762216][ T29] audit: type=1326 audit(1726883496.823:22771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.785977][ T29] audit: type=1326 audit(1726883496.823:22772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.809626][ T29] audit: type=1326 audit(1726883496.823:22773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.833198][ T29] audit: type=1326 audit(1726883496.823:22774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.856762][ T29] audit: type=1326 audit(1726883496.823:22775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 225.959308][T18367] netlink: 'syz.2.4586': attribute type 1 has an invalid length. [ 225.999488][T18371] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 226.051142][T18368] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 226.059585][T18368] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 226.102808][T18374] syz.1.4588[18374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.102871][T18374] syz.1.4588[18374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.120060][T18367] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 226.218316][T18371] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 226.229824][T18367] bond1 (unregistering): Released all slaves [ 226.265910][T18378] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 226.292020][T18378] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 226.307314][T18378] bond1: (slave batadv4): Enslaving as a backup interface with an up link [ 226.429012][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4591'. [ 226.458075][T18390] rdma_op ffff88813472e180 conn xmit_rdma 0000000000000000 [ 226.541619][T18400] syz.4.4597[18400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.541717][T18400] syz.4.4597[18400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.617988][T18410] syz.4.4601[18410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.629595][T18410] syz.4.4601[18410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.007962][T18421] rdma_op ffff88813472d180 conn xmit_rdma 0000000000000000 [ 227.349091][T18437] syz.2.4610[18437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.349135][T18437] syz.2.4610[18437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.510506][T18447] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 227.511010][T18449] netlink: 'syz.3.4616': attribute type 1 has an invalid length. [ 227.552205][T18447] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 227.568943][T18449] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 227.577205][T18449] bond2: (slave batadv5): Enslaving as a backup interface with an up link [ 227.799707][T18472] syz.2.4625[18472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.799750][T18472] syz.2.4625[18472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.026111][T18485] rdma_op ffff88813683f980 conn xmit_rdma 0000000000000000 [ 228.650422][T18502] lo speed is unknown, defaulting to 1000 [ 228.659431][T18502] caif0 speed is unknown, defaulting to 1000 [ 228.694877][T18521] rdma_op ffff888134736d80 conn xmit_rdma 0000000000000000 [ 228.763982][T18502] chnl_net:caif_netlink_parms(): no params data found [ 228.785857][T18531] vlan2: entered allmulticast mode [ 228.797379][T18529] netlink: 'syz.1.4644': attribute type 1 has an invalid length. [ 228.830911][T18529] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 228.841562][T18529] bond1: (slave batadv5): Enslaving as a backup interface with an up link [ 228.869452][T18538] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 228.889899][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.897082][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.944058][T18502] bridge_slave_0: entered allmulticast mode [ 228.951803][T18502] bridge_slave_0: entered promiscuous mode [ 228.958905][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.965981][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.973163][T18502] bridge_slave_1: entered allmulticast mode [ 228.979770][T18502] bridge_slave_1: entered promiscuous mode [ 228.989024][T18547] bridge0: port 3(vlan2) entered blocking state [ 228.995331][T18547] bridge0: port 3(vlan2) entered disabled state [ 229.001774][T18547] vlan2: entered allmulticast mode [ 229.007264][T18547] vlan2: left allmulticast mode [ 229.042976][T18502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.062922][T18502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.066233][T18555] rdma_op ffff888136631980 conn xmit_rdma 0000000000000000 [ 229.097404][T18502] team0: Port device team_slave_0 added [ 229.108458][T18502] team0: Port device team_slave_1 added [ 229.132761][T18502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.139816][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.165754][T18502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.185131][T18502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.192214][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.218294][T18502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.255514][T18502] hsr_slave_0: entered promiscuous mode [ 229.270077][T18502] hsr_slave_1: entered promiscuous mode [ 229.284939][T18502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.292513][T18502] Cannot create hsr debugfs directory [ 229.340475][T18578] tipc: Failed to obtain node identity [ 229.346055][T18578] tipc: Enabling of bearer rejected, failed to enable media [ 229.385819][T18502] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.459088][T18502] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.518938][T18502] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.544285][T18591] rdma_op ffff888136633580 conn xmit_rdma 0000000000000000 [ 229.646087][T18502] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.679300][T18606] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 229.705803][T18606] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 229.719161][T18502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.739372][T18502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.749140][T18502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.757975][T18502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.774898][T18613] vlan2: entered allmulticast mode [ 229.799921][T18617] rdma_op ffff888136639580 conn xmit_rdma 0000000000000000 [ 229.832372][T18502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.858827][T18502] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.870650][T18624] netlink: 'syz.1.4683': attribute type 1 has an invalid length. [ 229.888019][T18624] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 229.896021][T18624] bond2: (slave batadv6): Enslaving as a backup interface with an up link [ 229.906203][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.913277][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.947423][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.954497][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.972871][T18502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.983255][T18502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.056080][T18502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.140342][T18650] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 230.142980][T18502] veth0_vlan: entered promiscuous mode [ 230.163404][T18502] veth1_vlan: entered promiscuous mode [ 230.189981][T18650] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 230.193548][T18502] veth0_macvtap: entered promiscuous mode [ 230.215152][T18502] veth1_macvtap: entered promiscuous mode [ 230.233657][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.244271][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.254135][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.264571][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.274395][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.284835][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.294653][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.305177][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.315072][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.325503][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.335317][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.345763][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.355619][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.366037][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.375851][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.386305][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.396111][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.406546][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.416414][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.426901][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.436770][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.447226][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.457099][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.467508][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.477344][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.487882][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.502496][T18502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.515486][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.526032][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.531203][T18662] rdma_op ffff888136631d80 conn xmit_rdma 0000000000000000 [ 230.535864][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.535880][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.563314][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.573743][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.583558][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.594032][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.604057][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.614496][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.624370][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.634793][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.644604][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.655015][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.665063][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.675654][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.685480][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.695902][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.705755][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.716179][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.726022][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.736452][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.746397][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.756831][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.762675][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 230.762687][ T29] audit: type=1326 audit(1726885293.920:23082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc44def9 code=0x7ffc0000 [ 230.766640][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.766656][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.766668][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.772828][ T29] audit: type=1326 audit(1726885293.920:23083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc44def9 code=0x7ffc0000 [ 230.796326][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.798988][T18502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.887843][ T29] audit: type=1326 audit(1726885293.970:23084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f74fc44def9 code=0x7ffc0000 [ 230.897484][T18502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.911443][ T29] audit: type=1326 audit(1726885293.970:23085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f74fc44df33 code=0x7ffc0000 [ 230.911468][ T29] audit: type=1326 audit(1726885293.970:23086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74fc44c9df code=0x7ffc0000 [ 230.911491][ T29] audit: type=1326 audit(1726885293.970:23087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f74fc44df87 code=0x7ffc0000 [ 230.911514][ T29] audit: type=1326 audit(1726885293.980:23088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74fc44c890 code=0x7ffc0000 [ 230.920202][T18502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.943582][ T29] audit: type=1326 audit(1726885293.980:23089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74fc44cb8a code=0x7ffc0000 [ 230.966928][T18502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.990366][ T29] audit: type=1326 audit(1726885293.980:23090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc44def9 code=0x7ffc0000 [ 230.990405][ T29] audit: type=1326 audit(1726885294.030:23091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18668 comm="syz.3.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fc44def9 code=0x7ffc0000 [ 231.013943][T18502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.126480][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'. [ 231.189377][T18680] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.218861][T18692] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.227969][T18680] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 231.260192][T18699] netlink: 'syz.3.4705': attribute type 1 has an invalid length. [ 231.273654][T18692] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 231.283078][T18702] rdma_op ffff88813663bd80 conn xmit_rdma 0000000000000000 [ 231.320486][T18699] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 231.329321][T18699] bond3: (slave batadv6): Enslaving as a backup interface with an up link [ 231.519703][T18722] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.552987][T18722] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 231.618090][T18733] rdma_op ffff888132258980 conn xmit_rdma 0000000000000000 [ 231.680093][T18741] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.703476][T18741] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 231.886206][T18756] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.913710][T18756] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 231.927431][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4728'. [ 232.031081][T18768] rdma_op ffff888136632d80 conn xmit_rdma 0000000000000000 [ 232.060928][T18771] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 232.142949][T18771] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 232.476616][T18797] rdma_op ffff888139120580 conn xmit_rdma 0000000000000000 [ 232.495442][T18800] bpf_get_probe_write_proto: 10 callbacks suppressed [ 232.495455][T18800] syz.2.4744[18800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.502389][T18800] syz.2.4744[18800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.535565][T18803] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 232.573503][T18803] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 232.707913][T18824] rdma_op ffff88812f733980 conn xmit_rdma 0000000000000000 [ 232.728652][T18828] syz.3.4757[18828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.728711][T18828] syz.3.4757[18828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.777109][T18833] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 232.857038][T18833] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 232.889799][T18848] bridge0: port 3(vlan2) entered blocking state [ 232.896206][T18848] bridge0: port 3(vlan2) entered disabled state [ 232.902580][T18848] vlan2: entered allmulticast mode [ 232.913091][T18848] vlan2: left allmulticast mode [ 233.012590][T18855] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 233.045236][T18855] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 233.070234][T18865] rdma_op ffff8881363ec580 conn xmit_rdma 0000000000000000 [ 233.194046][T18875] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 233.237328][T18880] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4779'. [ 233.242917][T18875] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 233.263778][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4779'. [ 233.273366][T18880] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 233.608803][T18896] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 233.609075][T18903] rdma_op ffff88813683fd80 conn xmit_rdma 0000000000000000 [ 233.687647][T18913] syz.3.4791[18913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.687681][T18913] syz.3.4791[18913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.736805][T18915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4793'. [ 233.804773][T18927] vlan2: entered allmulticast mode [ 233.843186][T18930] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 233.874171][T18934] rdma_op ffff888136632180 conn xmit_rdma 0000000000000000 [ 233.956613][T18946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4807'. [ 234.013462][T18954] syz.2.4809[18954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.013551][T18954] syz.2.4809[18954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.089255][T18965] rdma_op ffff888114d46d80 conn xmit_rdma 0000000000000000 [ 234.099309][T18960] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 234.126461][T18968] vlan2: entered allmulticast mode [ 234.147062][T18974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4818'. [ 234.194175][T18983] syz.0.4823[18983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.194279][T18983] syz.0.4823[18983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.400650][T19006] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 234.664588][T19002] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 234.703566][T19026] vlan2: entered allmulticast mode [ 234.863039][T19046] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 235.122255][T19084] bridge0: port 3(vlan2) entered blocking state [ 235.128637][T19084] bridge0: port 3(vlan2) entered disabled state [ 235.136387][T19084] vlan2: entered allmulticast mode [ 235.143043][T19084] vlan2: left allmulticast mode [ 235.380456][T19116] rdma_op ffff888134734d80 conn xmit_rdma 0000000000000000 [ 235.405812][T19120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4873'. [ 235.414896][T19120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4873'. [ 235.800062][T19147] rdma_op ffff88813225a980 conn xmit_rdma 0000000000000000 [ 235.820166][T19150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4887'. [ 235.829258][T19150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4887'. [ 235.849119][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 235.849148][ T29] audit: type=1326 audit(1726888115.003:23488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 235.903336][ T29] audit: type=1326 audit(1726888115.003:23489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 235.927014][ T29] audit: type=1326 audit(1726888115.003:23490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 235.950621][ T29] audit: type=1326 audit(1726888115.003:23491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 235.974300][ T29] audit: type=1326 audit(1726888115.003:23492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 235.998047][ T29] audit: type=1326 audit(1726888115.003:23493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 236.021616][ T29] audit: type=1326 audit(1726888115.003:23494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 236.045308][ T29] audit: type=1326 audit(1726888115.003:23495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 236.068876][ T29] audit: type=1326 audit(1726888115.003:23496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 236.092471][ T29] audit: type=1326 audit(1726888115.003:23497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 236.179656][T19179] netlink: 'syz.2.4897': attribute type 1 has an invalid length. [ 236.217132][T19179] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 236.225389][T19179] bond1: (slave batadv4): Enslaving as a backup interface with an up link [ 236.241503][T19179] bond1 (unregistering): (slave batadv4): Releasing backup interface [ 236.256329][T19186] net_ratelimit: 12 callbacks suppressed [ 236.256341][T19186] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 236.274234][T19179] bond1 (unregistering): Released all slaves [ 236.309915][T19188] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 236.339319][T19194] vlan2: entered allmulticast mode [ 236.355502][T19188] bond1 (unregistering): Released all slaves [ 236.519638][T19210] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 236.902588][T19226] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.013233][T19240] rds_sendmsg: 1 callbacks suppressed [ 237.013247][T19240] rdma_op ffff88810c18ed80 conn xmit_rdma 0000000000000000 [ 237.049858][T19242] __nla_validate_parse: 4 callbacks suppressed [ 237.049924][T19242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4922'. [ 237.055365][T19244] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.056186][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4922'. [ 237.164859][T19258] vlan2: entered allmulticast mode [ 237.252201][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4935'. [ 237.261213][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4935'. [ 237.274245][T19272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4936'. [ 237.283216][T19272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4936'. [ 237.338904][T19277] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.504510][T19299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4947'. [ 237.513511][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4947'. [ 237.563019][T19314] rdma_op ffff8881363ef980 conn xmit_rdma 0000000000000000 [ 237.676787][T19316] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.763296][T19316] xt_check_target: 11 callbacks suppressed [ 237.763311][T19316] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 237.908625][T19333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4962'. [ 237.917885][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'. [ 238.051795][T19353] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 238.052549][T19351] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 238.098120][T19353] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 238.106562][T19351] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 238.245855][T19383] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 238.267807][T19385] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 238.272352][T19383] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 238.297709][T19385] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 238.444355][T19417] vlan2: entered allmulticast mode [ 238.944951][T19463] vlan2: entered allmulticast mode [ 239.272835][T19501] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 239.383688][T19516] vlan2: entered allmulticast mode [ 239.418658][T19525] netlink: 'syz.0.5049': attribute type 1 has an invalid length. [ 239.440651][T19525] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 239.448382][T19525] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 239.461718][T19525] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 239.472287][T19525] bond1 (unregistering): Released all slaves [ 239.629843][T19535] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 239.679931][T19553] netlink: 'syz.1.5060': attribute type 13 has an invalid length. [ 240.222095][T19571] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 240.272850][T19579] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 240.503325][T19603] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 240.528644][T19608] vlan2: entered allmulticast mode [ 240.720145][T19629] netlink: 'syz.1.5092': attribute type 1 has an invalid length. [ 240.826499][T19639] bond3 (unregistering): Released all slaves [ 241.099768][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 241.099789][ T29] audit: type=1326 audit(1726890168.259:23630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19649 comm="syz.0.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d298def9 code=0x7ffc0000 [ 241.131853][ T29] audit: type=1326 audit(1726890168.259:23631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.155567][ T29] audit: type=1326 audit(1726890168.259:23632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.179148][ T29] audit: type=1326 audit(1726890168.259:23633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.202716][ T29] audit: type=1326 audit(1726890168.259:23634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.226384][ T29] audit: type=1326 audit(1726890168.259:23635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.250006][ T29] audit: type=1326 audit(1726890168.269:23636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.273626][ T29] audit: type=1326 audit(1726890168.269:23637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.297206][ T29] audit: type=1326 audit(1726890168.269:23638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.320804][ T29] audit: type=1326 audit(1726890168.269:23639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.2.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f18a6def9 code=0x7ffc0000 [ 241.351461][T19655] vlan2: entered allmulticast mode [ 241.428970][T19659] netlink: 'syz.0.5102': attribute type 1 has an invalid length. [ 241.448236][T19659] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 241.455933][T19659] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 241.480920][T19659] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 241.507828][T19659] bond1 (unregistering): Released all slaves [ 241.587956][T19674] net_ratelimit: 7 callbacks suppressed [ 241.587969][T19674] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.681092][T19685] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.981053][T19707] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.087630][T19722] netlink: 'syz.1.5127': attribute type 1 has an invalid length. [ 242.166404][T19734] bond3 (unregistering): Released all slaves [ 242.336528][T19757] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.336928][T19753] vlan2: entered allmulticast mode [ 242.460917][T19769] vlan2: entered allmulticast mode [ 242.528318][T19784] rdma_op ffff888136632d80 conn xmit_rdma 0000000000000000 [ 242.589274][T19792] netlink: 'syz.2.5158': attribute type 1 has an invalid length. [ 242.608722][T19792] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 242.617825][T19792] bond1: (slave batadv5): Enslaving as a backup interface with an up link [ 242.634352][T19792] bond1 (unregistering): (slave batadv5): Releasing backup interface [ 242.648869][T19792] bond1 (unregistering): Released all slaves [ 242.998168][T19815] rdma_op ffff88813683e980 conn xmit_rdma 0000000000000000 [ 243.108724][T19820] vlan2: entered allmulticast mode [ 243.130715][T19817] xt_check_target: 6 callbacks suppressed [ 243.130728][T19817] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 243.291521][T19838] netlink: 'syz.1.5178': attribute type 1 has an invalid length. [ 243.348989][T19835] lo speed is unknown, defaulting to 1000 [ 243.355020][T19835] caif0 speed is unknown, defaulting to 1000 [ 243.375743][T19847] bond3 (unregistering): Released all slaves [ 243.410488][T19849] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 243.618533][T19863] rdma_op ffff888139370980 conn xmit_rdma 0000000000000000 [ 243.726324][T19877] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 244.017777][T19895] rdma_op ffff888136633580 conn xmit_rdma 0000000000000000 [ 244.248097][T19916] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.274168][T19916] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 244.301038][T19924] rdma_op ffff888136631980 conn xmit_rdma 0000000000000000 [ 244.328275][T19926] netlink: 'syz.0.5212': attribute type 1 has an invalid length. [ 244.345269][T19926] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 244.353213][T19926] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 244.365796][T19926] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 244.378285][T19926] bond1 (unregistering): Released all slaves [ 244.564941][T19948] __nla_validate_parse: 3 callbacks suppressed [ 244.564956][T19948] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5218'. [ 244.644440][T19955] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.692076][T19955] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 244.764494][T19980] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.793052][T19980] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 244.873350][T19999] rdma_op ffff888136632180 conn xmit_rdma 0000000000000000 [ 244.957387][T20012] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.988622][T20012] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 245.061958][T20032] rdma_op ffff888139121980 conn xmit_rdma 0000000000000000 [ 245.160971][T20046] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.186030][T20046] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 245.220079][T20059] rdma_op ffff888139122180 conn xmit_rdma 0000000000000000 [ 245.285439][T20064] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 245.371711][T20081] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.397172][T20087] rdma_op ffff88813683e980 conn xmit_rdma 0000000000000000 [ 245.413964][T20081] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 246.106021][T20126] rdma_op ffff888136632980 conn xmit_rdma 0000000000000000 [ 246.368401][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 246.368416][ T29] audit: type=1326 audit(1726892221.528:23902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.398248][ T29] audit: type=1326 audit(1726892221.528:23903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.422871][ T29] audit: type=1326 audit(1726892221.528:23904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.446554][ T29] audit: type=1326 audit(1726892221.528:23905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.470211][ T29] audit: type=1326 audit(1726892221.528:23906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.489116][T20162] netlink: 'syz.0.5305': attribute type 1 has an invalid length. [ 246.493839][ T29] audit: type=1326 audit(1726892221.528:23907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.493866][ T29] audit: type=1326 audit(1726892221.528:23908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.493887][ T29] audit: type=1326 audit(1726892221.528:23909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.572422][ T29] audit: type=1326 audit(1726892221.528:23910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.596070][ T29] audit: type=1326 audit(1726892221.528:23911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20161 comm="syz.1.5306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9def9 code=0x7ffc0000 [ 246.640515][T20175] bond1 (unregistering): Released all slaves [ 246.892759][T20208] net_ratelimit: 3 callbacks suppressed [ 246.892773][T20208] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 246.943815][T20214] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.158834][T20242] netlink: 'syz.2.5335': attribute type 1 has an invalid length. [ 247.166515][T20245] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.188552][T20242] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 247.203961][T20242] bond1: (slave batadv6): Enslaving as a backup interface with an up link [ 247.226018][T20242] bond1 (unregistering): (slave batadv6): Releasing backup interface [ 247.247402][T20242] bond1 (unregistering): Released all slaves [ 247.260738][T20252] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.301190][T20256] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5339'. [ 247.425259][T20279] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.534389][T20293] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5354'. [ 247.641431][T20301] rds_sendmsg: 4 callbacks suppressed [ 247.641485][T20301] rdma_op ffff88813225ad80 conn xmit_rdma 0000000000000000 [ 247.674005][T20305] vlan2: entered allmulticast mode [ 247.760084][T20320] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5367'. [ 247.826350][T20327] rdma_op ffff88813225ad80 conn xmit_rdma 0000000000000000 [ 247.922126][T20344] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.969005][T20351] vlan2: entered allmulticast mode [ 247.982528][T20352] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5380'. [ 248.015724][T20356] rdma_op ffff888114d46d80 conn xmit_rdma 0000000000000000 [ 248.122999][T20378] netlink: 'syz.3.5393': attribute type 1 has an invalid length. [ 248.128984][T20376] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.150136][T20378] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 248.167481][T20378] bond4: (slave batadv7): Enslaving as a backup interface with an up link [ 248.169293][T20376] xt_check_target: 11 callbacks suppressed [ 248.169306][T20376] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 248.192913][T20378] bond4 (unregistering): (slave batadv7): Releasing backup interface [ 248.204260][T20378] bond4 (unregistering): Released all slaves [ 248.212098][T20387] rdma_op ffff88813225b980 conn xmit_rdma 0000000000000000 [ 248.405369][T20414] rdma_op ffff888134738980 conn xmit_rdma 0000000000000000 [ 248.463000][T20426] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.500226][T20426] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 248.520831][T20436] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.555788][T20436] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 248.616132][T20446] rdma_op ffff88813663a580 conn xmit_rdma 0000000000000000 [ 248.693687][T20457] vlan2: entered allmulticast mode [ 248.733310][T20462] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.758393][T20462] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 248.813779][T20472] rdma_op ffff888132259180 conn xmit_rdma 0000000000000000 [ 248.997529][T20491] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 249.051303][T20497] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 249.097444][T20502] rdma_op ffff88813472c180 conn xmit_rdma 0000000000000000 [ 249.104418][T20504] vlan2: entered allmulticast mode [ 249.170906][T20517] netlink: 'syz.3.5448': attribute type 1 has an invalid length. [ 249.192970][T20517] bond4 (unregistering): Released all slaves [ 249.257488][T20505] lo speed is unknown, defaulting to 1000 [ 249.272672][T20505] caif0 speed is unknown, defaulting to 1000 [ 249.351568][T20530] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 249.423292][T20542] rdma_op ffff88813b6ac180 conn xmit_rdma 0000000000000000 [ 249.428581][T20505] chnl_net:caif_netlink_parms(): no params data found [ 249.492577][T20505] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.499752][T20505] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.519071][T20505] bridge_slave_0: entered allmulticast mode [ 249.525104][T20554] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 249.536595][T20505] bridge_slave_0: entered promiscuous mode [ 249.553996][T20505] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.561085][T20505] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.578096][T20505] bridge_slave_1: entered allmulticast mode [ 249.589564][T20505] bridge_slave_1: entered promiscuous mode [ 249.619609][T20505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.630732][T20505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.674993][T20505] team0: Port device team_slave_0 added [ 249.689985][T20505] team0: Port device team_slave_1 added [ 249.722326][T20505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.729354][T20505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.755306][T20505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.768345][T20505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.769169][T20577] rdma_op ffff888136639180 conn xmit_rdma 0000000000000000 [ 249.775286][T20505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.775348][T20505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.828532][T20505] hsr_slave_0: entered promiscuous mode [ 249.834993][T20505] hsr_slave_1: entered promiscuous mode [ 249.854384][T20505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.868356][T20505] Cannot create hsr debugfs directory [ 249.982037][T20505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.169059][T20505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.246240][T20505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.326384][T20605] vlan2: entered allmulticast mode [ 250.357613][T20505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.396322][T20611] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 250.409059][T18502] ================================================================== [ 250.417120][T18502] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 250.424303][T18502] [ 250.426606][T18502] race at unknown origin, with assert no writes to 0xffff8881001cb1e8 of 4 bytes by task 18502 on cpu 0: [ 250.437779][T18502] dequeue_entities+0x6df/0x760 [ 250.442619][T18502] pick_next_task_fair+0x7d/0x410 [ 250.447627][T18502] __schedule+0x27c/0x940 [ 250.451941][T18502] schedule+0x55/0xc0 [ 250.455906][T18502] do_nanosleep+0xa3/0x300 [ 250.460303][T18502] hrtimer_nanosleep+0xc4/0x1c0 [ 250.465143][T18502] common_nsleep+0x68/0x90 [ 250.469542][T18502] __se_sys_clock_nanosleep+0x20a/0x240 [ 250.475073][T18502] __x64_sys_clock_nanosleep+0x55/0x70 [ 250.480516][T18502] x64_sys_call+0x253f/0x2d60 [ 250.485180][T18502] do_syscall_64+0xc9/0x1c0 [ 250.489666][T18502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.495549][T18502] [ 250.497862][T18502] value changed: 0x00000000 -> 0x00000001 [ 250.503562][T18502] [ 250.505877][T18502] Reported by Kernel Concurrency Sanitizer on: [ 250.512011][T18502] CPU: 0 UID: 0 PID: 18502 Comm: syz-executor Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 250.524068][T18502] Tainted: [W]=WARN [ 250.527852][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 250.537889][T18502] ================================================================== [ 250.599944][T20505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.608458][T20505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.616545][T20505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.625107][T20505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.666816][T20505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.679924][T20505] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.689973][ T1256] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.697045][ T1256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.717878][ T3354] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.725017][ T3354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.756211][T20505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.766578][T20505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.815616][T20505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.917630][T20505] veth0_vlan: entered promiscuous mode [ 250.926122][T20505] veth1_vlan: entered promiscuous mode [ 250.941154][T20505] veth0_macvtap: entered promiscuous mode [ 250.949736][T20505] veth1_macvtap: entered promiscuous mode [ 250.959907][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.970498][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.980309][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.990803][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.000625][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.011181][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.020987][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.031393][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.041245][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.051680][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.061484][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.072013][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.081810][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.092205][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.101997][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.112526][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.122438][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.132851][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.142670][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.153305][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.163275][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.173731][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.183573][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.193997][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.203932][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.214357][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.224291][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.234759][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.246966][T20505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.255325][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.265821][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.275674][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.286175][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.296002][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.306426][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.316242][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.326741][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.336544][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.346975][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.356799][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.367209][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.377050][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.387467][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.397270][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.407687][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.417496][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.427955][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.437760][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.448172][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.458012][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.468470][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.478287][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.488735][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.498552][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.509003][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.518827][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.529319][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.539177][T20505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.549744][T20505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.561396][T20505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.574773][T20505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.583474][T20505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.592244][T20505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.600980][T20505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0