last executing test programs: 594.067437ms ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000440)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00@\x00', 0x3c, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x40, 0x0, @void}}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1, @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES64=0x0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 455.815528ms ago: executing program 1 (id=6): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) pipe(&(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003900)={'syztnl1\x00', &(0x7f0000003800)={'gretap0\x00', 0x0, 0x8, 0x4f00e3ac7d86eb8c, 0x4, 0x8, {{0x34, 0x4, 0x0, 0x1f, 0xd0, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @multicast2, {[@generic={0x89, 0xf, "7ce4c0999a6622ed6d9a9f4771"}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x7, [0xf, 0x5, 0x7]}, @timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0x1, [{@local, 0xfffffff8}, {@rand_addr=0x64010100, 0x6}, {@broadcast, 0x7}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x2f, 0x1, 0xa, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x57af}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0x2}, {@private=0xa010101, 0x4}]}, @lsrr={0x83, 0x1f, 0x38, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x19}, @local]}, @ssrr={0x89, 0xb, 0xf4, [@dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101]}, @noop, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ra={0x94, 0x4}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 353.481269ms ago: executing program 3 (id=4): set_mempolicy(0x4003, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000076000000ffffffff95"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x5a95, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000465000/0x3000)=nil, 0x3000, 0x3000009, 0x20010, r1, 0x10000000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') pread64(r3, &(0x7f0000000440)=""/249, 0xf9, 0x359) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x160) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000400)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@nodelalloc}, {}, {@bsdgroups}]}, 0x6, 0x640, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne471k4hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3QxoRF4vnLP/yW9bfelpr2PEDUE7PLhU78u1saXf/l409GuOfaDP+mTn8JZncqPd/ncd/jf39ZD7uSVvGYdmY5Vr7XznemvH3n1/5daf66+O/uSeNR1Z/Yyw4DM93IuZa4v9ZFmwx/sniT9ps/6zIjYv91fHtv/zzSqd1o46/9jTig7bHP7uj0izV5frkubX16upi/WfbOv7wxx/8rlP97eN/ZwCRtpdt/+kO8Tdt/7T1ddnf5H77X7nTmvH7a0/vdKp/puf2T/8xkdSPNyeKnB/tbG1tLEVMJFeLIkX+8tbWxvnu8dbLvKzlz0v1+D/8Uvv+v+f93xLVVONfZh/uf+/2i07r3ub933Qx+XWtzzZ0ksW/0nv77+v/Wd6v+qzjv99/8IVO67rFP3WYwAAAAAAAAKCE0vwabJIuvEmn6cJCfb7sZ2I6rd7b3Pry2r0Hd1ciPsw/DzmeRprkHxmZrS8na+vV1aXi87CN5fMty1+JiPci4jeVqXx54ea96sqogwcAAAAAAAAAAAAAAAAAAIBj4kwx/79xn+r/VOrz/4GS6H2DuX33fwBOiUHeYBI43vL+320X/+7w2gIMl/0/lJf+D+Wl/0N56f9QXvo/lJf+D+Wl/0N56f8AAAAAcCq998Vnf0siYvsbU/kjM1GsM+kXTrfxA5WuDKwdwPDp0VBeby79G+xD6fQ1/v9f8eWAg28OMAJJu8x8cFDr3vmftX3lrp3Dtw0AAAAAAAAAAAAAqPvg/c7z/w82Nxg4aUz7g/I6xPx/Xx0AJ5yv/ofycowP9JjFH5OdVvSa/w8AAAAAAAAAAAAAHJmZ/JGkC8Vc4JlI04WFiE9FxNkYT9bWq6uLEfFuRPy1Mv5Otrw06kYDAAAAAAAAAAAAAAAAAADAKbP58NHt5Wp1daM58f99Oac70bgLau/CtT7KdE18Mw74qkiG/2eZioiRb5SBJcaacpKI7WzLH4uGbWzG8WhGnhjxPyYAAAAAAAAAAAAAAAAAACihprnH7c39dsgtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDh273/f4/EynT9BX0V3psYdYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMn0SQAAAP//riA8Ng==") set_mempolicy(0x0, &(0x7f0000000040)=0x7ff, 0x1) 337.527409ms ago: executing program 1 (id=7): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x782, 0xfffd, 0x0, 0x0, 0x7, "e318ff36845800"}) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) socket(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000e40)=ANY=[@ANYBLOB="0500000000000000"], 0x8) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) 309.477279ms ago: executing program 1 (id=8): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x5, 0x7, 0x1, "c9f1661ce679818e9080fa9c987b93a6cfa84634c00d3338c4122aadc911a36792e9c5f51997b8eb760f674a5a00481f00", 0xe}, 0x60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xc}, @void, @val={0xc, 0x99, {0x9, 0x29}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) syz_io_uring_setup(0x748d, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000847fff)="fe", 0x1, 0xe0ff, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 0 (id=1): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) read$snapshot(r0, &(0x7f0000000100)=""/93, 0x5d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_clone(0x40000000, 0x0, 0x51, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = creat(0x0, 0xecf86c37d53049e9) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0xb0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32=0x0, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x20, 0x4e24, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4e24, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xfc, 0x0, @void}}}}}}}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.926768][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 14.926783][ T29] audit: type=1400 audit(1732613570.007:76): avc: denied { transition } for pid=3199 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.930786][ T29] audit: type=1400 audit(1732613570.007:77): avc: denied { noatsecure } for pid=3199 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.933349][ T29] audit: type=1400 audit(1732613570.007:78): avc: denied { write } for pid=3199 comm="sh" path="pipe:[1499]" dev="pipefs" ino=1499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.936744][ T29] audit: type=1400 audit(1732613570.007:79): avc: denied { rlimitinh } for pid=3199 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.939262][ T29] audit: type=1400 audit(1732613570.007:80): avc: denied { siginh } for pid=3199 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.389525][ T29] audit: type=1400 audit(1732613573.467:81): avc: denied { read } for pid=3003 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 22.281637][ T29] audit: type=1400 audit(1732613577.357:82): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.282661][ T3309] cgroup: Unknown subsys name 'net' [ 22.304365][ T29] audit: type=1400 audit(1732613577.357:83): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.332207][ T29] audit: type=1400 audit(1732613577.387:84): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.445917][ T3309] cgroup: Unknown subsys name 'cpuset' [ 22.451908][ T3309] cgroup: Unknown subsys name 'rlimit' [ 22.600919][ T29] audit: type=1400 audit(1732613577.677:85): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.624916][ T29] audit: type=1400 audit(1732613577.677:86): avc: denied { create } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.645395][ T29] audit: type=1400 audit(1732613577.677:87): avc: denied { write } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.651596][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.665819][ T29] audit: type=1400 audit(1732613577.677:88): avc: denied { read } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.691826][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.694697][ T29] audit: type=1400 audit(1732613577.687:89): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.728141][ T29] audit: type=1400 audit(1732613577.687:90): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.751472][ T29] audit: type=1400 audit(1732613577.757:91): avc: denied { relabelto } for pid=3311 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.947788][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 24.014663][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 24.029527][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 24.068838][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.109965][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.117054][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.124201][ T3326] bridge_slave_0: entered allmulticast mode [ 24.130518][ T3326] bridge_slave_0: entered promiscuous mode [ 24.136758][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 24.155869][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.162932][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.170270][ T3326] bridge_slave_1: entered allmulticast mode [ 24.176608][ T3326] bridge_slave_1: entered promiscuous mode [ 24.197567][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.204672][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.211794][ T3324] bridge_slave_0: entered allmulticast mode [ 24.218220][ T3324] bridge_slave_0: entered promiscuous mode [ 24.233163][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.244952][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.252073][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.259298][ T3324] bridge_slave_1: entered allmulticast mode [ 24.265735][ T3324] bridge_slave_1: entered promiscuous mode [ 24.278611][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.315935][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.325889][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.335340][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.342397][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.349601][ T3318] bridge_slave_0: entered allmulticast mode [ 24.356106][ T3318] bridge_slave_0: entered promiscuous mode [ 24.379600][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.386746][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.393848][ T3318] bridge_slave_1: entered allmulticast mode [ 24.400193][ T3318] bridge_slave_1: entered promiscuous mode [ 24.406324][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.413361][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.420500][ T3319] bridge_slave_0: entered allmulticast mode [ 24.426858][ T3319] bridge_slave_0: entered promiscuous mode [ 24.433600][ T3326] team0: Port device team_slave_0 added [ 24.439457][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.446519][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.453664][ T3325] bridge_slave_0: entered allmulticast mode [ 24.459998][ T3325] bridge_slave_0: entered promiscuous mode [ 24.474485][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.481654][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.488741][ T3319] bridge_slave_1: entered allmulticast mode [ 24.495179][ T3319] bridge_slave_1: entered promiscuous mode [ 24.501609][ T3326] team0: Port device team_slave_1 added [ 24.511925][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.519050][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.526278][ T3325] bridge_slave_1: entered allmulticast mode [ 24.532655][ T3325] bridge_slave_1: entered promiscuous mode [ 24.539356][ T3324] team0: Port device team_slave_0 added [ 24.553550][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.571110][ T3324] team0: Port device team_slave_1 added [ 24.581852][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.595771][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.602757][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.628678][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.649205][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.667390][ T3318] team0: Port device team_slave_0 added [ 24.673266][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.680308][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.706222][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.720143][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.730006][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.743567][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.750537][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.776439][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.787640][ T3318] team0: Port device team_slave_1 added [ 24.793551][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.800533][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.826474][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.838719][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.866808][ T3319] team0: Port device team_slave_0 added [ 24.877545][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.884483][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.910414][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.921648][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.928613][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.954617][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.969894][ T3319] team0: Port device team_slave_1 added [ 24.976276][ T3325] team0: Port device team_slave_0 added [ 24.982999][ T3325] team0: Port device team_slave_1 added [ 25.014412][ T3326] hsr_slave_0: entered promiscuous mode [ 25.020276][ T3326] hsr_slave_1: entered promiscuous mode [ 25.039607][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.046590][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.072517][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.083706][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.090733][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.116638][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.130633][ T3324] hsr_slave_0: entered promiscuous mode [ 25.136616][ T3324] hsr_slave_1: entered promiscuous mode [ 25.142439][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.150031][ T3324] Cannot create hsr debugfs directory [ 25.159791][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.166855][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.192832][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.207905][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.214851][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.240815][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.261718][ T3318] hsr_slave_0: entered promiscuous mode [ 25.267785][ T3318] hsr_slave_1: entered promiscuous mode [ 25.273625][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.281228][ T3318] Cannot create hsr debugfs directory [ 25.324176][ T3319] hsr_slave_0: entered promiscuous mode [ 25.330252][ T3319] hsr_slave_1: entered promiscuous mode [ 25.336143][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.343690][ T3319] Cannot create hsr debugfs directory [ 25.363769][ T3325] hsr_slave_0: entered promiscuous mode [ 25.369808][ T3325] hsr_slave_1: entered promiscuous mode [ 25.375890][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.383429][ T3325] Cannot create hsr debugfs directory [ 25.518085][ T3326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.533946][ T3326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.542470][ T3326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.552947][ T3326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.578708][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.587350][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.596700][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.605380][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.627182][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.636332][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.650391][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.658815][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.686664][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.695630][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.708371][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.717111][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.752814][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.761572][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.770810][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.779317][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.794848][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.815807][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.826839][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.833965][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.851858][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.866699][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.873748][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.900913][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.924833][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.936350][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.945450][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.963154][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.970251][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.978936][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.986100][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.994545][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.001713][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.026486][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.033575][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.054347][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.066070][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.079238][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.098884][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.109348][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.121438][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.128538][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.138301][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.145365][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.173013][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.196535][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.234655][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.241751][ T1639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.268191][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.275331][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.290085][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.310833][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.324315][ T3326] veth0_vlan: entered promiscuous mode [ 26.363614][ T3326] veth1_vlan: entered promiscuous mode [ 26.394279][ T3319] veth0_vlan: entered promiscuous mode [ 26.412443][ T3326] veth0_macvtap: entered promiscuous mode [ 26.426004][ T3326] veth1_macvtap: entered promiscuous mode [ 26.446361][ T3319] veth1_vlan: entered promiscuous mode [ 26.454226][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.471112][ T3325] veth0_vlan: entered promiscuous mode [ 26.481373][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.493129][ T3326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.502013][ T3326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.510847][ T3326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.519594][ T3326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.544345][ T3325] veth1_vlan: entered promiscuous mode [ 26.554705][ T3319] veth0_macvtap: entered promiscuous mode [ 26.564215][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.575798][ T3319] veth1_macvtap: entered promiscuous mode [ 26.585253][ T3326] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.599008][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.610321][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.621257][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.634608][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.645222][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.656984][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.670813][ T3324] veth0_vlan: entered promiscuous mode [ 26.679072][ T3319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.687871][ T3319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.696661][ T3319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.705514][ T3319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.720827][ T3324] veth1_vlan: entered promiscuous mode [ 26.753318][ T3325] veth0_macvtap: entered promiscuous mode [ 26.762321][ T3453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.771085][ T3453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.782250][ T3325] veth1_macvtap: entered promiscuous mode [ 26.796791][ T3324] veth0_macvtap: entered promiscuous mode [ 26.811448][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.822002][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.831953][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.842717][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.862586][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.871036][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.881750][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.891657][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.902122][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.913278][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.936717][ T3325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.945557][ T3325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.954257][ T3325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.963121][ T3325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.980625][ T3324] veth1_macvtap: entered promiscuous mode [ 27.005989][ T3318] veth0_vlan: entered promiscuous mode [ 27.022267][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.032849][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.042893][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.053388][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.055159][ T3463] loop3: detected capacity change from 0 to 1024 [ 27.063312][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.080072][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.091227][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.093323][ T3463] ======================================================= [ 27.093323][ T3463] WARNING: The mand mount option has been deprecated and [ 27.093323][ T3463] and is ignored by this kernel. Remove the mand [ 27.093323][ T3463] option from the mount to silence this warning. [ 27.093323][ T3463] ======================================================= [ 27.102919][ T3318] veth1_vlan: entered promiscuous mode [ 27.148895][ T3463] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 27.163189][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.173716][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.183568][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.194010][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.203835][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.214260][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.230901][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.247235][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.255981][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.258542][ T3463] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4: Invalid block bitmap block 0 in block_group 0 [ 27.264689][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.286505][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.295329][ T3463] __quota_error: 131 callbacks suppressed [ 27.295341][ T3463] Quota error (device loop3): write_blk: dquota write failed [ 27.308641][ T3463] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 27.354355][ T3463] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4: Failed to acquire dquot type 0 [ 27.378309][ T3463] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 27.392744][ T3463] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4: Invalid inode bitmap blk 0 in block_group 0 [ 27.406477][ T3463] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 27.414126][ T50] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 27.424145][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 27.426572][ T3463] EXT4-fs (loop3): 1 orphan inode deleted [ 27.441937][ T3463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.454809][ T29] audit: type=1400 audit(1732613582.527:223): avc: denied { mount } for pid=3462 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.477947][ T3463] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.975783][ T3318] syz-executor (3318) used greatest stack depth: 10792 bytes left [ 28.025474][ T3324] syz-executor (3324) used greatest stack depth: 10664 bytes left [ 28.500178][ T3463] syz.3.4 (3463) used greatest stack depth: 9536 bytes left [ 29.080233][ T29] audit: type=1400 audit(1732613584.157:224): avc: denied { read } for pid=3059 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.105837][ T150] bridge_slave_1: left allmulticast mode [ 29.111571][ T150] bridge_slave_1: left promiscuous mode [ 29.114916][ T29] audit: type=1400 audit(1732613584.187:225): avc: denied { search } for pid=3059 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.117515][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.138561][ T29] audit: type=1400 audit(1732613584.187:226): avc: denied { read } for pid=3059 comm="dhcpcd" name="n25" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.167021][ T29] audit: type=1400 audit(1732613584.187:227): avc: denied { open } for pid=3059 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.189871][ T29] audit: type=1400 audit(1732613584.187:228): avc: denied { getattr } for pid=3059 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.213308][ T150] bridge_slave_0: left allmulticast mode [ 29.219023][ T150] bridge_slave_0: left promiscuous mode [ 29.224614][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.307367][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 29.316989][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 29.326426][ T150] bond0 (unregistering): Released all slaves [ 29.353410][ T29] audit: type=1400 audit(1732613584.427:229): avc: denied { read } for pid=3475 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.389847][ T150] hsr_slave_0: left promiscuous mode [ 29.396277][ T150] hsr_slave_1: left promiscuous mode [ 29.402130][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.410122][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.420313][ T150] veth1_vlan: left promiscuous mode [ 29.425616][ T150] veth0_vlan: left promiscuous mode [ 29.473049][ T150] team0 (unregistering): Port device team_slave_1 removed [ 29.483377][ T150] team0 (unregistering): Port device team_slave_0 removed [ 29.749762][ T150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.007880][ T150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.048512][ T150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.098313][ T150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.156427][ T150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.182973][ T150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.237287][ T150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.287346][ T150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.346561][ T150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.397853][ T150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.457358][ T150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.498036][ T150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.560260][ T150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.617072][ T150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.677501][ T150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.717489][ T150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.786041][ T150] bridge_slave_1: left allmulticast mode [ 30.791727][ T150] bridge_slave_1: left promiscuous mode [ 30.797414][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.805392][ T150] bridge_slave_0: left allmulticast mode [ 30.811080][ T150] bridge_slave_0: left promiscuous mode [ 30.816777][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.825210][ T150] bridge_slave_1: left allmulticast mode [ 30.830859][ T150] bridge_slave_1: left promiscuous mode [ 30.836592][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.845237][ T150] bridge_slave_0: left allmulticast mode [ 30.850920][ T150] bridge_slave_0: left promiscuous mode [ 30.856760][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.866100][ T150] bridge_slave_1: left allmulticast mode [ 30.871762][ T150] bridge_slave_1: left promiscuous mode [ 30.877495][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.885298][ T150] bridge_slave_0: left allmulticast mode [ 30.890929][ T150] bridge_slave_0: left promiscuous mode [ 30.896652][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.904627][ T150] bridge_slave_1: left allmulticast mode [ 30.910361][ T150] bridge_slave_1: left promiscuous mode [ 30.916058][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.923593][ T150] bridge_slave_0: left allmulticast mode [ 30.929273][ T150] bridge_slave_0: left promiscuous mode [ 30.934924][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.247030][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.256553][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.266073][ T150] bond0 (unregistering): Released all slaves [ 31.274427][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.284148][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.293357][ T150] bond0 (unregistering): Released all slaves [ 31.301543][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.311149][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.320821][ T150] bond0 (unregistering): Released all slaves [ 31.329255][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.338892][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.347996][ T150] bond0 (unregistering): Released all slaves [ 31.391788][ T150] hsr_slave_0: left promiscuous mode [ 31.398235][ T150] hsr_slave_1: left promiscuous mode [ 31.403865][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.411293][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.419426][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.426942][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.437429][ T150] hsr_slave_0: left promiscuous mode [ 31.443152][ T150] hsr_slave_1: left promiscuous mode [ 31.449557][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.456992][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.465538][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.472998][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.481631][ T150] hsr_slave_0: left promiscuous mode [ 31.487294][ T150] hsr_slave_1: left promiscuous mode [ 31.492919][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.500401][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.508020][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.515425][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.524002][ T150] hsr_slave_0: left promiscuous mode [ 31.529733][ T150] hsr_slave_1: left promiscuous mode [ 31.535477][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.542891][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.550517][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.557995][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.569651][ T150] veth1_macvtap: left promiscuous mode [ 31.575284][ T150] veth0_macvtap: left promiscuous mode [ 31.580814][ T150] veth1_vlan: left promiscuous mode [ 31.586038][ T150] veth0_vlan: left promiscuous mode [ 31.591720][ T150] veth1_macvtap: left promiscuous mode [ 31.597203][ T150] veth0_macvtap: left promiscuous mode [ 31.602671][ T150] veth1_vlan: left promiscuous mode [ 31.608067][ T150] veth0_vlan: left promiscuous mode [ 31.613693][ T150] veth1_macvtap: left promiscuous mode [ 31.619242][ T150] veth0_macvtap: left promiscuous mode [ 31.624787][ T150] veth1_vlan: left promiscuous mode [ 31.630035][ T150] veth0_vlan: left promiscuous mode [ 31.635660][ T150] veth1_macvtap: left promiscuous mode [ 31.641120][ T150] veth0_macvtap: left promiscuous mode [ 31.646680][ T150] veth1_vlan: left promiscuous mode [ 31.651988][ T150] veth0_vlan: left promiscuous mode [ 31.781575][ T150] team0 (unregistering): Port device team_slave_1 removed [ 31.790647][ T150] team0 (unregistering): Port device team_slave_0 removed [ 31.834189][ T150] team0 (unregistering): Port device team_slave_1 removed [ 31.843732][ T150] team0 (unregistering): Port device team_slave_0 removed [ 31.888739][ T150] team0 (unregistering): Port device team_slave_1 removed [ 31.898396][ T150] team0 (unregistering): Port device team_slave_0 removed [ 31.941361][ T150] team0 (unregistering): Port device team_slave_1 removed [ 31.950200][ T150] team0 (unregistering): Port device team_slave_0 removed [ 34.411896][ T4086] ================================================================== [ 34.419982][ T4086] BUG: KCSAN: data-race in exec_mmap / vms_clear_ptes [ 34.426736][ T4086] [ 34.429039][ T4086] write to 0xffff888101fd4638 of 8 bytes by task 3059 on cpu 0: [ 34.436654][ T4086] vms_clear_ptes+0x1a7/0x300 [ 34.441326][ T4086] vms_complete_munmap_vmas+0x16c/0x470 [ 34.446859][ T4086] do_vmi_align_munmap+0x344/0x390 [ 34.451952][ T4086] do_vmi_munmap+0x1eb/0x230 [ 34.456531][ T4086] __vm_munmap+0xfd/0x220 [ 34.460851][ T4086] __x64_sys_munmap+0x36/0x40 [ 34.465522][ T4086] x64_sys_call+0xe14/0x2dc0 [ 34.470098][ T4086] do_syscall_64+0xc9/0x1c0 [ 34.474583][ T4086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.480486][ T4086] [ 34.482811][ T4086] read to 0xffff888101fd4638 of 8 bytes by task 4086 on cpu 1: [ 34.490337][ T4086] exec_mmap+0x35c/0x4d0 [ 34.494567][ T4086] begin_new_exec+0xaf9/0x10b0 [ 34.499316][ T4086] load_elf_binary+0x63b/0x19e0 [ 34.504148][ T4086] bprm_execve+0x4e6/0xc30 [ 34.508546][ T4086] do_execveat_common+0x793/0x800 [ 34.513573][ T4086] __x64_sys_execve+0x5a/0x70 [ 34.518232][ T4086] x64_sys_call+0x1333/0x2dc0 [ 34.522896][ T4086] do_syscall_64+0xc9/0x1c0 [ 34.527384][ T4086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.533262][ T4086] [ 34.535564][ T4086] value changed: 0x0000000000000262 -> 0x0000000000000282 [ 34.542649][ T4086] [ 34.544958][ T4086] Reported by Kernel Concurrency Sanitizer on: [ 34.551098][ T4086] CPU: 1 UID: 0 PID: 4086 Comm: dhcpcd Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 34.561061][ T4086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.571098][ T4086] ==================================================================