last executing test programs: 5.255962708s ago: executing program 3 (id=25): r0 = io_uring_setup(0x7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x231}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.885084086s ago: executing program 3 (id=33): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) 4.788304088s ago: executing program 3 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 4.612902201s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4.513956163s ago: executing program 3 (id=51): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.767194757s ago: executing program 3 (id=102): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}, @in6={0xa, 0x4e24, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7269ca8d}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x0, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) 2.746133417s ago: executing program 32 (id=102): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}, @in6={0xa, 0x4e24, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7269ca8d}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x0, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) 1.523261431s ago: executing program 0 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x3f, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 1.476273862s ago: executing program 2 (id=133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.325989995s ago: executing program 0 (id=134): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x768943b6b926b3ed) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60004ce) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, 0x0, 0x8, 0x0) 1.325828465s ago: executing program 2 (id=135): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.05226906s ago: executing program 0 (id=146): syz_usbip_server_init(0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 714.482836ms ago: executing program 1 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 603.037508ms ago: executing program 4 (id=142): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 600.670139ms ago: executing program 1 (id=152): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff88}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 540.23716ms ago: executing program 4 (id=143): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="25a4be9c0ce89cbf9f6699e37603e1b74587b94298ccf0bf22e83e142bea0dfdb0f130961206c868fd9ad415d70013932fd13ff87593d15015e5643df1aa3d4d9ac4d8b4095417d99b967dd587d8891c594bf0aa6949c1eb6f418eec14bdf7c0d9d73e789e7d7b12926bf14c10ae3c8a4e8e002c3370d1d229ad2647c10126e77b6645aa687743473311af671d69128b0181cdb8e68f8e501d020837bf8828c6e01e05e92b31ff8cc07e778ab39c9d4d878000f3730d6272df8070c8b90046c6b152a6c8aec4d04c996a5293d436b35ef0ef516605cf3c9405b322adeafeaa826d3b0aa14d37baa57b5062acfe1176e56269e125eb3225ab80aeaf2b7ade327e144dbfcec7dacff5c74e04ce85d200b2a8ae09cc6f804c73c3db742f204f80b4d3e68ea22de44918490b09fa1f50cf59fad253f6b29a7d98d3909a32820c93aa93dd90127ed3f6c5bb1fc092b4aa73162a095db772e6ce346c66177b482fa24e00027d13696a563bf055916fe34ce24466163da4343ea07b397ce41b3ce145e7f72e2b9072253b3e8be8b921411853284cd70123ac5ab40dae387efd12fb1b0b995329e69c0b9e2268ed6c2639f75ccc4a32e5377078bbd9a4119a1f6bd0752791faf2cac84df0c42e43106819a3a624f3f3995f7a4d892622dda277192f58e948af6a95fad17685f9fe1dc8c5dfb4adee234d7fd18c8b2f29b34a66d2120a1d0f7f0a774247abd9fa595c736750f183761fbd9b029f6601d199ba12734a59be5efaac2b66ba564b65683763e33cc93b1cf125956a5f704b325e1d131e13df01c2eff2a29e65ab02cba302020b5e5f763f15bd9348ac127213822f8ee4021b99bbe8a569a00ea66d9b06498e7e29e6e7d5ba4515e0592a78232e69bc59f049923597ad50abfda79e160e91bb1b4f7574b83727a02343755124ef25abcc7f66eeed248c0b77c33350a42c0e06d69c18745789fe922f5df70e64f6da80e430b836a389ab83b5ec8b4d44965eabcea85bc3b69126263a9a201a72558ad26a3f8b228b389e01d6bd94bc37d145c0e12bba5a6a15685125882193870235dd50eda594cbf40d79b0d0184baea13dfe03705f929e0f727d84a4b98a596a211674ae16a3d61ce76c60d3eb006c232c8e4826a84aadaf60b1fba24e5bfe881622628dbe3776269373cc2405eb9c940b1b2595f8426aa314ded4c3102bb07ace7de03edd73c3fee3846e17a2dac01850b560e5b4c447c4b415e9ed81694810356addfedeb9ce645c73f9297274842d29880d294a4364898d5fea28957a2fb14114c8affa08524949a67419093070e482da553f9690f74bdbfef145f8a0b6bca7573578ea1877d49c67fd8598e763f565bdccc6741e4ce12de0c25568c4c929b19a8d138f52f2e122994c76d9ac032b76cbeabe68d7f98c5c4a5b8bcb43f5b6ce57bbfc3653ae94fc045cc3aa8981f3296ed5adbaf0c7b02c7df26ba9bd5d49c1a9cf7897f08d91d93bcb7568e8cd6ad33bba1bd30a97707c62b9eafa0edd0e9a45bda10ff1f918445a82712848591c50dc01163aad5bc4a564ff57542e9ee6fadd2d30b208c1751b57257f9c0b850dee36ced2c25393819ae623d41873737b2ac3ffb9a412bef3f01acf4038e7d1807419a6a73afaabf4f9c7d36a75a4d2a140479bed2a0c32572c2bc4962a611d31b34d722725391d10dc9152868c1db3a07266dc71d951789db47c0d97b293a6004a26811c5fbfd3bce97dc127febc16ccb2bfae1658aab5fa31d8de69f47ed35be4cdea02884889198245dcc1c7fd9c29d7424b50ac56fb8597d30e8fdc6f6f04bca4f4d3718eddac272b6153d10e805b740d9e8ee35e797334e16a7db9ee53bcf48f512a3b4e82b4b814d5ec90da3d583c3d7b453d5e433572531f4ea632df22ce7c7178fc7a07616969e2a305af4b8efaa1c9a6ab06a1683e563518a303d0dce5fd4d8dc3501734f3a0fbdf0af675a72362e4e47599707bedfbb90fd585969f0973e9a80351c21ea4ebbd1e9b376fe8a2d6a765deb1203e67c6ecd8561138ddbd65dc942f95b0473500efd5c2dbdbecaf948b4f9be93800944aa8f4604d350355d24c913520152db29e698e01fba4dc6b27245fd62d23302fe3a6339c82e93f55bfe8f959bd3443591c0074e32330146fad7ce40bda92d2c0f65fe6f237e21e032c82e1e1a3a1d7848919062f932b175bf21ddeece862791424b1fa3a3504e61840d313ad303fa654f637d2428317055682a2e17d2d2fa44d048baf989306b32427fce31c37eb9f80cedfeb919ce9ae7a8a78a8ccab0f0365c52d8d2d86a274fdd04e849672b7cde631c1ded5014c9186b576e57d50e2f16fbe1564c7d76149e2dd7db7ef0c0aeddda7e5b31db39331e5c715f999fd6a0679275de566f554c0c4a3ece2123976c6a2671d4107f5f833baeb968f9cf10acb9e5a808ce047e8ca227d674ea32e6ad2e7b81fc168d3c85fc6548cf0a4f413064782dea276d27c18f512ce5f5a81211df7024d1cd76e242a87f0ac13068c14606f1eb22bd50155e461e2d4a21e28ea6e64127ceb04a5d85485e09e5b32594156549121cc9ad693763ddc0e7c9ec0a54cf7d54cafb75001b6a5c7562cbe632a717e325f2b5115defcd340842a2a0747b2ea2ac552ad34bdddf66f78a83a18bc83728e5dbb5b00a0a5536e5ee936a958362fc719ff9cade216819b5e32e20fe6ebaf51ae7bcd29bd4121d7e0b13300049a0545aaa63f042f9d865d22bb1632427c40fdf58ce6fdd662ad56401174a05ed3705bca6294b2844e628e4a98e8b4a2b41cd77fc144d7d1de31087859e0b425fd6b9a398a8256ee0c2c0762dde714a958cea0c8f547fe73d1d3b0fc90426613b8f105a07ad9e6bb1fee9c77ad107bbf89e3e4dba32d104be1906485dca8b6d449615ef47507b1ed0479ed316f8b56297fb90c07dd3839a82d27d171d37c4886f3f5bd2022c73eb2ff9d623ce4aac1f0d42f9e09e832a19056758ec0b0eaf2a6848e7fa6434f82294ea950258f05bcd907a84911b88a8f52c00a7951594cdbef410c8b958d4f8618fb98704d4ad298236c5be0c25434a093fb5755af0b6322b63ae2e623f0fee42f14c3c4b95ddf63a5529e90f4433a45b853c483413ef201d1c24a20e88628cfac50ec26ff0cbc83a4c3999ee9f8e93726811fb013e10aa08289e6deb655c391695793a8edf5a9c2a595bb81fe0162e39fd0e9aabf51eaf10186ffb354e5a8da2f5999e8a9958dac6d8cdf4feb07702ea67fc3db7f8ae7874162f00125e298254406cc26f322cdb28273a4e1ead4bcf07b1081e03bd59df5291037d9ce6fb101996f81b4c216c88f4ece75d35f97f54457a8116cc19666ccdfe8d77dbae05656cb184722a1c73dfe5215a241ab7c45a4668a307df243b8f02b3e1a2535155d62e4d8a0a8d583b38d3243d32e573063e3fd55d7a6edeb0a77e51a42a79079a4355739c2ae826d6e8e94356c42127406dce0025448efe36427158f7d64e3a178f723afc33d2b7b56af844350a8db4387c874ffbf4a1035b615bad38bb29d85a5cc4ea81d7de3f5f1f18c31da9459837e80d38a2f735920f6ae5caada66273d059181262e0c66d5832c6e4183f43f3ae37e3dddb0d9fa1e36ec7fdee8aab17fb9f47d080e0d73673f8a3c5d3a70c36aba6a04760e447fd3d6f3afee0dde6c6d2babfca717e3be22e9474df7b1ffcf156e24d36c1f7d45057cdb4840d4164e397db1634544891ad2112655c2cdb321e8f1a2385b7ccdff4a7d1148b47496b6b22d33a9e07761ed7d9ae16fe54b22026e4f068f0ca9127c51cc39812701f3511f6f16e29ab7138b97adfb4c15b94b90c21b358cccc7835e6c5f151222b5138661f62f2b8a527ad7f4a03e2fbed98e1c6d31cbb82e291496775746f091cfe6362aca9fc40d700d95e2ced98115b34d07d12639c7a5fdcc894618a72b6e18fe855768ad94964ee9d039839c01fa3bcfaa6283bee546a96f4a58d654eeb9616c7b67098fcf2a03afe6b6a1dab0197cd1a29bb7e0769cb921ef7e08c113223bf0c586fc23c2971efb3a29957b896b6f0bdfce51ca7be552d734a814eacd4cab06e577f09e7e6c54c913d3b1ea67278fbf1ebe6824312621c3130159528845c4f296ba0e35a8048270efccfd0084ec965f6b72a2a8432ac0b2378b73c3f2a7be1992b36fe87511c06c2844e11a08f7fb618a4764c6bef30779aaf1638ce32492732ce619e74dd4ef694a9c6ab22ab563608fcb065dba5b0844bd90e4cb7c4ae30fa37ad015a359d6fe984904898ac3bf27169a0dc7f59bb35df8a059b3f4c4bc43c7ac077d7289537f39f7d4acdc98b02a728b3449afe9df3dcd3561992b7e5e1e712259a66ea883d5eaa1075a983f613daf02307e8f8f7513e59ccc5bad3bcc1a5747670588941a9d17e06f94f3eeb694744306cfaef10a781c31d7f12664d29749e560d3f1aaf1b8acb8d4822c5141ea40c8f62d7b2e454ee74abf31c850d1413fd7b3e52d3f34942b528b95b0c2b6875d502412abb6490144c6c0adee91ca02cd961d9e505b0e7fd520d2c0bba4a78e2f00d84255958f0571a51f295adc0d4a9a08f8c70b037c214bbb17b94fb0d7b45b1d895243caa1eeb3c7adb2669f4c1913bcffb03d32bdf5c2587254b0c76ce67df28060214d6b524f648385b18cb7114785b0f062acaf3ff4a59ba6c9ad0f4c06e2e1944a390cb2eb990de7cf92ab378c69bb5fd30263b7326d739057050d7b8ca2ed11d497bd194c41e8f8eb6825976879a2f48bff9c0af6b3764d706188d3ec7e812fab8660a3e330889b020bec3cecddf19b66fddadbb1a0cdd9ec61337cf9cca346199b193c11830cc33b8ebdbc524a58c6577fdd2b0589256f4b452274dcf6b72a81e661231333149eb7ecb37b0e5a74e6a9cab2832ad9424a185e9da9d11e619984a3334327ea0aa00d66aa8c06209f57afaa5ea3d8238f8750e99b2b09022c29ee2cc79022a50ea0ff13a36d6e69533156c53a91bbb0c8329ffcfeb78cb66542dafee5f481351b64fb6fe1ff9aeddbf671e2b99497307e8b7daced4258ab4b6fe369255a3158327fca5b213c3320ca2f693aa3564e564b379c32f23b0293c775badb4621471739f0db3b14b1f55db8906aab95556351cb72bcab8f3c32764097903f5c95ab50676a122da5507ff4fcf3b8fe059a9bb8dd6533b3365fc82126a184453aa7101339f9574b80a59f537211ee9d7003de19dea4029dcc6dbe83c8e756cc93c3c8d2e4d3ab175f7abb44fc40be9b83780483c8078d6e8128bf152922d8b442cfb402cb68aeebf6e68e31f15343765be0fbfb6c37f24e51eb55fc4e1b85f5f946ed985558d8222ada03bce8596823c1f3e2ae3abf63b59b01be937bffe8a0c67e587c5eb7c46affcb4ea954b59ee97dba1454f5d708a2fd1100732f308b01e72b39b759d9688af6884a50735773608a71154911812fa2107c59bd720df90a28571efc09b1d7e84c06f8014305a777d10879b96be9b8482192a476bdd9ddd6fee5b9e6d77cfe73bcd6c2e266a243407f513a46f63018217aab326088462dc5b1f133a89facf7dfeac3c98380f9a3e8fc6d1584a491fe64c70d478d6547a9abb7bc45c612ca0d283534e6617754e6f3d789763e20553433ea4bf83d74a7c61f3f67a88c1ecb1379aa6d05b0b0901fb38ff46f81dbb8cae168f0b232780bee5cb26d6308bfa8c5b00ba435adc3a59a6321ffcf1307a09dfa9607d1bbe66a3fca47d527f74df2ab1730a95b327a25c99b23f1589ac676", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) 478.828361ms ago: executing program 4 (id=144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 458.980232ms ago: executing program 1 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x3f, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 314.455755ms ago: executing program 5 (id=104): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x325, &(0x7f0000001740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 312.308355ms ago: executing program 0 (id=157): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff88}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 299.438475ms ago: executing program 4 (id=147): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x768943b6b926b3ed) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60004ce) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, 0x0, 0x8, 0x0) 298.896465ms ago: executing program 2 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) unlink(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 258.898505ms ago: executing program 2 (id=148): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 258.409795ms ago: executing program 4 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) unlink(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 176.577597ms ago: executing program 1 (id=149): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000300)) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 150.215378ms ago: executing program 2 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 149.677628ms ago: executing program 4 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x3f, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 149.243287ms ago: executing program 0 (id=151): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x50, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 100.700558ms ago: executing program 1 (id=153): r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 86.011239ms ago: executing program 2 (id=154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2}, 0x64) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 8.06507ms ago: executing program 0 (id=155): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000000, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=156): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 33.529227][ T29] audit: type=1400 audit(1757790080.575:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.530496][ T3294] cgroup: Unknown subsys name 'net' [ 33.552007][ T29] audit: type=1400 audit(1757790080.575:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.579413][ T29] audit: type=1400 audit(1757790080.615:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.697330][ T3294] cgroup: Unknown subsys name 'cpuset' [ 33.703701][ T3294] cgroup: Unknown subsys name 'rlimit' [ 33.816421][ T29] audit: type=1400 audit(1757790080.865:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.840940][ T29] audit: type=1400 audit(1757790080.865:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.861533][ T29] audit: type=1400 audit(1757790080.865:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.881953][ T29] audit: type=1400 audit(1757790080.865:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.890916][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.902343][ T29] audit: type=1400 audit(1757790080.865:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.935708][ T29] audit: type=1400 audit(1757790080.865:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.959150][ T29] audit: type=1400 audit(1757790080.965:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.988833][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.314838][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.379356][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.426578][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.476620][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.493409][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.500673][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.508015][ T3304] bridge_slave_0: entered allmulticast mode [ 35.514427][ T3304] bridge_slave_0: entered promiscuous mode [ 35.521237][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.528412][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.535642][ T3304] bridge_slave_1: entered allmulticast mode [ 35.542152][ T3304] bridge_slave_1: entered promiscuous mode [ 35.561861][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.618202][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.625410][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.632691][ T3309] bridge_slave_0: entered allmulticast mode [ 35.639097][ T3309] bridge_slave_0: entered promiscuous mode [ 35.646684][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.669473][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.676713][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.683850][ T3309] bridge_slave_1: entered allmulticast mode [ 35.690496][ T3309] bridge_slave_1: entered promiscuous mode [ 35.697505][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.750383][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.757499][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.764907][ T3311] bridge_slave_0: entered allmulticast mode [ 35.772445][ T3311] bridge_slave_0: entered promiscuous mode [ 35.779558][ T3304] team0: Port device team_slave_0 added [ 35.786577][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.804270][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.811516][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.818781][ T3312] bridge_slave_0: entered allmulticast mode [ 35.825192][ T3312] bridge_slave_0: entered promiscuous mode [ 35.831778][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.838961][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.846089][ T3311] bridge_slave_1: entered allmulticast mode [ 35.852661][ T3311] bridge_slave_1: entered promiscuous mode [ 35.859700][ T3304] team0: Port device team_slave_1 added [ 35.866862][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.881398][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.888657][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.895819][ T3312] bridge_slave_1: entered allmulticast mode [ 35.902450][ T3312] bridge_slave_1: entered promiscuous mode [ 35.929101][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.936191][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.943415][ T3308] bridge_slave_0: entered allmulticast mode [ 35.950020][ T3308] bridge_slave_0: entered promiscuous mode [ 35.956820][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.963877][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.971098][ T3308] bridge_slave_1: entered allmulticast mode [ 35.977650][ T3308] bridge_slave_1: entered promiscuous mode [ 36.011075][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.028428][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.037900][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.044876][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.070826][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.082439][ T3309] team0: Port device team_slave_0 added [ 36.089290][ T3309] team0: Port device team_slave_1 added [ 36.096089][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.106696][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.116881][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.126183][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.133193][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.159097][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.184889][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.206009][ T3311] team0: Port device team_slave_0 added [ 36.234419][ T3308] team0: Port device team_slave_0 added [ 36.240971][ T3311] team0: Port device team_slave_1 added [ 36.252402][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.259408][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.285376][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.296896][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.303860][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.329852][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.341160][ T3312] team0: Port device team_slave_0 added [ 36.352711][ T3308] team0: Port device team_slave_1 added [ 36.377417][ T3312] team0: Port device team_slave_1 added [ 36.393990][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.401000][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.426962][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.438031][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.444992][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.470938][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.482369][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.489397][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.515350][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.540331][ T3304] hsr_slave_0: entered promiscuous mode [ 36.546504][ T3304] hsr_slave_1: entered promiscuous mode [ 36.552707][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.559692][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.585689][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.604075][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.611081][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.637027][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.648361][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.655340][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.681397][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.731073][ T3309] hsr_slave_0: entered promiscuous mode [ 36.737461][ T3309] hsr_slave_1: entered promiscuous mode [ 36.743321][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.749158][ T3309] Cannot create hsr debugfs directory [ 36.761649][ T3308] hsr_slave_0: entered promiscuous mode [ 36.767684][ T3308] hsr_slave_1: entered promiscuous mode [ 36.773441][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 36.779211][ T3308] Cannot create hsr debugfs directory [ 36.805665][ T3312] hsr_slave_0: entered promiscuous mode [ 36.811896][ T3312] hsr_slave_1: entered promiscuous mode [ 36.817887][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 36.823632][ T3312] Cannot create hsr debugfs directory [ 36.831616][ T3311] hsr_slave_0: entered promiscuous mode [ 36.837813][ T3311] hsr_slave_1: entered promiscuous mode [ 36.843796][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.849555][ T3311] Cannot create hsr debugfs directory [ 37.069251][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.078454][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.093055][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.101732][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.122091][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.131434][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.140147][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.152543][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.202320][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.213299][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.222727][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.231865][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.256426][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.274655][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.283809][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.299948][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.309097][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.328854][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.337990][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.359664][ T1985] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.366791][ T1985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.387961][ T1985] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.395099][ T1985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.410361][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.425254][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.435219][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.444974][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.454260][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.479534][ T1985] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.486610][ T1985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.504932][ T1985] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.512112][ T1985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.530876][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.551567][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.585813][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.599191][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.621516][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.628709][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.651477][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.658573][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.679297][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.690415][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.708155][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.715260][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.730392][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.737561][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.792590][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.807997][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.832779][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.846331][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.853459][ T1893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.866781][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.882937][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.890210][ T1893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.940887][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.951411][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.994300][ T3304] veth0_vlan: entered promiscuous mode [ 38.016139][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.029331][ T3304] veth1_vlan: entered promiscuous mode [ 38.081069][ T3304] veth0_macvtap: entered promiscuous mode [ 38.103494][ T3308] veth0_vlan: entered promiscuous mode [ 38.112405][ T3304] veth1_macvtap: entered promiscuous mode [ 38.128055][ T3308] veth1_vlan: entered promiscuous mode [ 38.140834][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.160607][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.173575][ T3309] veth0_vlan: entered promiscuous mode [ 38.181402][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.204433][ T3309] veth1_vlan: entered promiscuous mode [ 38.211662][ T173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.224513][ T3308] veth0_macvtap: entered promiscuous mode [ 38.244664][ T173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.264326][ T3309] veth0_macvtap: entered promiscuous mode [ 38.274213][ T173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.292525][ T3309] veth1_macvtap: entered promiscuous mode [ 38.304223][ T173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.313651][ T3308] veth1_macvtap: entered promiscuous mode [ 38.338906][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.339679][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.366936][ T3311] veth0_vlan: entered promiscuous mode [ 38.375084][ T3311] veth1_vlan: entered promiscuous mode [ 38.382304][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.400359][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.423738][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.435607][ T3311] veth0_macvtap: entered promiscuous mode [ 38.448243][ T173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.458435][ T3470] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 38.458915][ T3311] veth1_macvtap: entered promiscuous mode [ 38.474465][ T173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.499300][ T173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.508495][ T173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.525677][ T173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.535962][ T173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.547369][ T3312] veth0_vlan: entered promiscuous mode [ 38.555344][ T3312] veth1_vlan: entered promiscuous mode [ 38.570088][ T173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.580033][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.602945][ T173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.606409][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 38.606429][ T29] audit: type=1400 audit(1757790085.645:95): avc: denied { prog_load } for pid=3474 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.612752][ T3312] veth0_macvtap: entered promiscuous mode [ 38.617938][ T29] audit: type=1400 audit(1757790085.645:96): avc: denied { bpf } for pid=3474 comm="syz.1.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.644895][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.662352][ T29] audit: type=1400 audit(1757790085.645:97): avc: denied { map_create } for pid=3474 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.678049][ T3312] veth1_macvtap: entered promiscuous mode [ 38.688326][ T29] audit: type=1400 audit(1757790085.645:98): avc: denied { map_read map_write } for pid=3474 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.713468][ T29] audit: type=1400 audit(1757790085.645:99): avc: denied { perfmon } for pid=3474 comm="syz.1.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.747373][ T29] audit: type=1400 audit(1757790085.745:100): avc: denied { prog_run } for pid=3474 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.751604][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.788641][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.807423][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.816192][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.830088][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.853990][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.907559][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.916713][ T29] audit: type=1400 audit(1757790085.955:101): avc: denied { ioctl } for pid=3480 comm="syz.2.3" path="socket:[4740]" dev="sockfs" ino=4740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.949435][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.988763][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.029196][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.038885][ T29] audit: type=1326 audit(1757790086.015:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794a06eba9 code=0x7ffc0000 [ 39.062098][ T29] audit: type=1326 audit(1757790086.015:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794a06eba9 code=0x7ffc0000 [ 39.085393][ T29] audit: type=1326 audit(1757790086.015:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f794a06eba9 code=0x7ffc0000 [ 39.109679][ T3484] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 39.188923][ T3499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.209649][ T3499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.299057][ T3499] syz.0.11 (3499) used greatest stack depth: 10712 bytes left [ 39.406850][ T3520] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 39.592887][ T3535] loop0: detected capacity change from 0 to 1024 [ 39.616638][ T3535] ======================================================= [ 39.616638][ T3535] WARNING: The mand mount option has been deprecated and [ 39.616638][ T3535] and is ignored by this kernel. Remove the mand [ 39.616638][ T3535] option from the mount to silence this warning. [ 39.616638][ T3535] ======================================================= [ 39.689130][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.750889][ T3535] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.24: Allocating blocks 385-513 which overlap fs metadata [ 39.765572][ T3538] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 39.767499][ T3548] 9p: Unknown access argument ¿: -22 [ 39.776483][ T3538] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 39.788170][ T3534] EXT4-fs (loop0): pa ffff8881071e1070: logic 16, phys. 129, len 24 [ 39.796394][ T3534] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 39.822619][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.973336][ T3558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.996657][ T3558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.087691][ T3569] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 40.232554][ T3587] program syz.1.46 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.424468][ T3605] IPv6: Can't replace route, no match found [ 40.502761][ T3614] loop0: detected capacity change from 0 to 128 [ 40.815348][ T3638] ªªªªªª: renamed from vlan0 (while UP) [ 40.897210][ T3642] vhci_hcd: invalid port number 96 [ 40.902379][ T3642] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 41.541325][ T3668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 41.601099][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 41.610809][ T3674] bridge: RTM_NEWNEIGH with invalid ether address [ 41.656242][ T3678] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 41.805702][ T3696] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.806768][ T3694] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 41.823969][ T3694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 41.831647][ T3694] vhci_hcd vhci_hcd.0: Device attached [ 41.867018][ T3694] loop2: detected capacity change from 0 to 512 [ 41.894296][ T3694] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.910433][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.923500][ T3694] EXT4-fs (loop2): mount failed [ 41.994147][ T3697] vhci_hcd: connection closed [ 41.994471][ T1893] vhci_hcd: stop threads [ 42.003528][ T1893] vhci_hcd: release socket [ 42.008021][ T1893] vhci_hcd: disconnect device [ 42.031979][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.036300][ T3311] syz-executor (3311) used greatest stack depth: 10608 bytes left [ 42.056862][ T37] vhci_hcd: vhci_device speed not set [ 42.111080][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.189357][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.213041][ T3727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 42.236056][ T3731] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.243715][ T3731] vhci_hcd: invalid port number 253 [ 42.248984][ T3731] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 42.360347][ T31] bridge_slave_1: left allmulticast mode [ 42.366055][ T31] bridge_slave_1: left promiscuous mode [ 42.371903][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.383202][ T31] bridge_slave_0: left allmulticast mode [ 42.389109][ T31] bridge_slave_0: left promiscuous mode [ 42.394974][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.519141][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.538323][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.548174][ T31] bond0 (unregistering): Released all slaves [ 42.567268][ T3753] netlink: 'syz.0.113': attribute type 3 has an invalid length. [ 42.579849][ T3756] batadv1: entered promiscuous mode [ 42.624285][ T31] hsr_slave_0: left promiscuous mode [ 42.632266][ T31] hsr_slave_1: left promiscuous mode [ 42.641909][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.649395][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.672599][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.680389][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.700532][ T31] veth1_macvtap: left promiscuous mode [ 42.708447][ T31] veth0_macvtap: left promiscuous mode [ 42.720996][ T31] veth1_vlan: left promiscuous mode [ 42.728537][ T31] veth0_vlan: left promiscuous mode [ 42.831518][ T31] team0 (unregistering): Port device team_slave_1 removed [ 42.847397][ T31] team0 (unregistering): Port device team_slave_0 removed [ 42.901194][ T3717] chnl_net:caif_netlink_parms(): no params data found [ 43.022551][ T3801] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 43.029127][ T3801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 43.036834][ T3801] vhci_hcd vhci_hcd.0: Device attached [ 43.038069][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.049656][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.075380][ T3801] loop4: detected capacity change from 0 to 512 [ 43.099912][ T3717] bridge_slave_0: entered allmulticast mode [ 43.113636][ T3801] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.128781][ T3717] bridge_slave_0: entered promiscuous mode [ 43.136017][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.143163][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.151703][ T3717] bridge_slave_1: entered allmulticast mode [ 43.158722][ T3801] EXT4-fs (loop4): mount failed [ 43.164267][ T3717] bridge_slave_1: entered promiscuous mode [ 43.176388][ T3802] vhci_hcd: connection closed [ 43.176528][ T3809] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.189465][ T173] vhci_hcd: stop threads [ 43.191250][ T3809] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.193736][ T173] vhci_hcd: release socket [ 43.193798][ T173] vhci_hcd: disconnect device [ 43.226434][ T37] vhci_hcd: vhci_device speed not set [ 43.267550][ T3717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.288076][ T3717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.336351][ T3833] batadv1: entered promiscuous mode [ 43.354908][ T3717] team0: Port device team_slave_0 added [ 43.366612][ T3717] team0: Port device team_slave_1 added [ 43.386959][ T3717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.393973][ T3717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.420150][ T3717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.431539][ T3717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.438551][ T3717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.464604][ T3717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.523081][ T3717] hsr_slave_0: entered promiscuous mode [ 43.533191][ T3717] hsr_slave_1: entered promiscuous mode [ 43.544010][ T3717] debugfs: 'hsr0' already exists in 'hsr' [ 43.549857][ T3717] Cannot create hsr debugfs directory [ 43.561827][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 43.678982][ T3717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.691314][ T3717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.704564][ T3717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.717287][ T3717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.779616][ T3879] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 43.786209][ T3879] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 43.794060][ T3879] vhci_hcd vhci_hcd.0: Device attached [ 43.801588][ T3883] netlink: 'syz.4.137': attribute type 3 has an invalid length. [ 43.823299][ T3879] loop0: detected capacity change from 0 to 512 [ 43.831987][ T3717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.850484][ T3879] __quota_error: 214 callbacks suppressed [ 43.850503][ T3879] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 43.850825][ T3717] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.863617][ T3879] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.885728][ T3717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.898332][ T3717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.913150][ T3879] EXT4-fs (loop0): mount failed [ 43.923025][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.930173][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.939236][ T3880] vhci_hcd: connection closed [ 43.945611][ T12] vhci_hcd: stop threads [ 43.954726][ T12] vhci_hcd: release socket [ 43.959270][ T12] vhci_hcd: disconnect device [ 43.976319][ T3406] vhci_hcd: vhci_device speed not set [ 43.977974][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.988833][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.039715][ T3717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.166377][ T3899] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 44.174262][ T3717] veth0_vlan: entered promiscuous mode [ 44.176643][ T3899] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 44.184671][ T3717] veth1_vlan: entered promiscuous mode [ 44.212285][ T3717] veth0_macvtap: entered promiscuous mode [ 44.226215][ T3717] veth1_macvtap: entered promiscuous mode [ 44.239337][ T3717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.252256][ T29] audit: type=1400 audit(1757790091.305:317): avc: denied { write } for pid=3919 comm="syz.1.152" lport=57211 faddr=fc00::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.262153][ T3920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3920 comm=syz.1.152 [ 44.289732][ T3717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.301250][ T173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.306689][ T29] audit: type=1400 audit(1757790091.305:318): avc: denied { name_connect } for pid=3919 comm="syz.1.152" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 44.352594][ T173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.376351][ T29] audit: type=1400 audit(1757790091.415:319): avc: denied { mounton } for pid=3717 comm="syz-executor" path="/root/syzkaller.X4uB1r/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 44.380031][ T3926] batadv1: entered promiscuous mode [ 44.410618][ T173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.416507][ T29] audit: type=1400 audit(1757790091.465:320): avc: denied { add_name } for pid=3717 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 44.419624][ T173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.444947][ T29] audit: type=1400 audit(1757790091.465:321): avc: denied { create } for pid=3717 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 44.473117][ T29] audit: type=1400 audit(1757790091.465:322): avc: denied { associate } for pid=3717 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.536657][ T3931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3931 comm=syz.0.157 [ 44.551470][ T3936] loop5: detected capacity change from 0 to 128 [ 44.583117][ T29] audit: type=1400 audit(1757790091.625:323): avc: denied { mount } for pid=3929 comm="syz.5.104" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.698146][ T3949] batadv1: entered promiscuous mode [ 44.713082][ T3952] netlink: 'syz.2.150': attribute type 3 has an invalid length. [ 44.748489][ T3956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 44.757481][ T3956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.154'. [ 44.766413][ T3956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 44.776611][ T3956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.154'. [ 44.785596][ T3956] netlink: 'syz.2.154': attribute type 6 has an invalid length. [ 44.920883][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 45.310225][ T3936] ================================================================== [ 45.318373][ T3936] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 45.326416][ T3936] [ 45.328751][ T3936] write to 0xffff8881194c5414 of 4 bytes by task 3945 on cpu 1: [ 45.336402][ T3936] xas_set_mark+0x12b/0x140 [ 45.340956][ T3936] tag_pages_for_writeback+0xc2/0x290 [ 45.346363][ T3936] writeback_iter+0x340/0x820 [ 45.351097][ T3936] mpage_writepages+0x87/0x1250 [ 45.355973][ T3936] fat_writepages+0x24/0x30 [ 45.360502][ T3936] do_writepages+0x1c6/0x310 [ 45.365127][ T3936] file_write_and_wait_range+0x156/0x2c0 [ 45.370811][ T3936] __generic_file_fsync+0x46/0x140 [ 45.375959][ T3936] fat_file_fsync+0x49/0x100 [ 45.380573][ T3936] vfs_fsync_range+0x10d/0x130 [ 45.385362][ T3936] generic_file_write_iter+0x1b8/0x2f0 [ 45.390850][ T3936] iter_file_splice_write+0x663/0xa60 [ 45.396252][ T3936] direct_splice_actor+0x153/0x2a0 [ 45.401390][ T3936] splice_direct_to_actor+0x30f/0x680 [ 45.406793][ T3936] do_splice_direct+0xda/0x150 [ 45.411591][ T3936] do_sendfile+0x380/0x650 [ 45.416049][ T3936] __x64_sys_sendfile64+0x105/0x150 [ 45.421294][ T3936] x64_sys_call+0x2bb0/0x2ff0 [ 45.426011][ T3936] do_syscall_64+0xd2/0x200 [ 45.430557][ T3936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.436469][ T3936] [ 45.438806][ T3936] read to 0xffff8881194c5414 of 4 bytes by task 3936 on cpu 0: [ 45.446366][ T3936] file_write_and_wait_range+0x10e/0x2c0 [ 45.452045][ T3936] __generic_file_fsync+0x46/0x140 [ 45.457203][ T3936] fat_file_fsync+0x49/0x100 [ 45.461824][ T3936] vfs_fsync_range+0x10d/0x130 [ 45.466618][ T3936] generic_file_write_iter+0x1b8/0x2f0 [ 45.472113][ T3936] iter_file_splice_write+0x663/0xa60 [ 45.477515][ T3936] direct_splice_actor+0x153/0x2a0 [ 45.482749][ T3936] splice_direct_to_actor+0x30f/0x680 [ 45.488165][ T3936] do_splice_direct+0xda/0x150 [ 45.492959][ T3936] do_sendfile+0x380/0x650 [ 45.497425][ T3936] __x64_sys_sendfile64+0x105/0x150 [ 45.502666][ T3936] x64_sys_call+0x2bb0/0x2ff0 [ 45.507378][ T3936] do_syscall_64+0xd2/0x200 [ 45.511923][ T3936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.517851][ T3936] [ 45.520197][ T3936] value changed: 0x02000021 -> 0x04000021 [ 45.525928][ T3936] [ 45.528275][ T3936] Reported by Kernel Concurrency Sanitizer on: [ 45.534460][ T3936] CPU: 0 UID: 0 PID: 3936 Comm: syz.5.104 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.544130][ T3936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.554219][ T3936] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 45.586512][ T29] audit: type=1400 audit(1757790092.625:324): avc: denied { write } for pid=3294 comm="syz-executor" path="pipe:[412]" dev="pipefs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.617720][ T29] audit: type=1400 audit(1757790092.645:325): avc: denied { unmount } for pid=3717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.870460][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.918972][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.999191][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.048768][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.129268][ T36] bridge_slave_1: left allmulticast mode [ 46.134968][ T36] bridge_slave_1: left promiscuous mode [ 46.140756][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.148760][ T36] bridge_slave_0: left allmulticast mode [ 46.154420][ T36] bridge_slave_0: left promiscuous mode [ 46.160143][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.229520][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.239493][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.249280][ T36] bond0 (unregistering): Released all slaves [ 46.299504][ T36] hsr_slave_0: left promiscuous mode [ 46.305261][ T36] hsr_slave_1: left promiscuous mode [ 46.311256][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.318747][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.328365][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.335775][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.348591][ T36] veth1_macvtap: left promiscuous mode [ 46.354093][ T36] veth0_macvtap: left promiscuous mode [ 46.403848][ T36] team0 (unregistering): Port device team_slave_1 removed [ 46.413920][ T36] team0 (unregistering): Port device team_slave_0 removed [ 46.690406][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.809354][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.858713][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.928684][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.000211][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.050227][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.109383][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.160181][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.239697][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.299550][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.360242][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.420258][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.486614][ T36] bridge_slave_1: left allmulticast mode [ 47.492346][ T36] bridge_slave_1: left promiscuous mode [ 47.498181][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.505939][ T36] bridge_slave_0: left allmulticast mode [ 47.511648][ T36] bridge_slave_0: left promiscuous mode [ 47.517467][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.525723][ T36] bridge_slave_1: left allmulticast mode [ 47.531478][ T36] bridge_slave_1: left promiscuous mode [ 47.537206][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.544980][ T36] bridge_slave_0: left allmulticast mode [ 47.550715][ T36] bridge_slave_0: left promiscuous mode [ 47.556571][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.564716][ T36] bridge_slave_1: left allmulticast mode [ 47.570503][ T36] bridge_slave_1: left promiscuous mode [ 47.576152][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.584172][ T36] bridge_slave_0: left allmulticast mode [ 47.589891][ T36] bridge_slave_0: left promiscuous mode [ 47.595564][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.719920][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.729776][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.739216][ T36] bond0 (unregistering): Released all slaves [ 47.790121][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.800012][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.810144][ T36] bond0 (unregistering): Released all slaves [ 47.879626][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.889383][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.898819][ T36] bond0 (unregistering): Released all slaves [ 47.954903][ T36] hsr_slave_0: left promiscuous mode [ 47.963254][ T36] hsr_slave_1: left promiscuous mode [ 47.969211][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.976670][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.984418][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.991973][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.001376][ T36] hsr_slave_0: left promiscuous mode [ 48.007269][ T36] hsr_slave_1: left promiscuous mode [ 48.012942][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.020374][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.028220][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.035622][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.044026][ T36] hsr_slave_0: left promiscuous mode [ 48.049758][ T36] hsr_slave_1: left promiscuous mode [ 48.055389][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.062833][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.070348][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.077774][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.091761][ T36] veth1_macvtap: left promiscuous mode [ 48.097273][ T36] veth0_macvtap: left promiscuous mode [ 48.103294][ T36] veth1_macvtap: left promiscuous mode [ 48.108798][ T36] veth0_macvtap: left promiscuous mode [ 48.114372][ T36] veth1_vlan: left promiscuous mode [ 48.119861][ T36] veth0_vlan: left promiscuous mode [ 48.125691][ T36] veth1_macvtap: left promiscuous mode [ 48.131209][ T36] veth0_macvtap: left promiscuous mode [ 48.234126][ T36] team0 (unregistering): Port device team_slave_1 removed [ 48.245436][ T36] team0 (unregistering): Port device team_slave_0 removed [ 48.299432][ T36] team0 (unregistering): Port device team_slave_1 removed [ 48.308641][ T36] team0 (unregistering): Port device team_slave_0 removed [ 48.357591][ T36] team0 (unregistering): Port device team_slave_1 removed [ 48.367006][ T36] team0 (unregistering): Port device team_slave_0 removed [ 48.398079][ T3406] infiniband syz1: ib_query_port failed (-19) [ 48.959723][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.009000][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.059861][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.099288][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.158438][ T36] bridge_slave_1: left allmulticast mode [ 49.164278][ T36] bridge_slave_1: left promiscuous mode [ 49.170104][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.178160][ T36] bridge_slave_0: left allmulticast mode [ 49.183838][ T36] bridge_slave_0: left promiscuous mode [ 49.189538][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.260456][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.270392][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.280148][ T36] bond0 (unregistering): Released all slaves [ 49.331606][ T36] hsr_slave_0: left promiscuous mode [ 49.337539][ T36] hsr_slave_1: left promiscuous mode [ 49.343179][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.350668][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.358612][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.366026][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.377136][ T36] veth1_macvtap: left promiscuous mode [ 49.382733][ T36] veth0_macvtap: left promiscuous mode [ 49.388992][ T36] veth1_vlan: left promiscuous mode [ 49.394347][ T36] veth0_vlan: left promiscuous mode [ 49.460532][ T36] team0 (unregistering): Port device team_slave_1 removed [ 49.470176][ T36] team0 (unregistering): Port device team_slave_0 removed