last executing test programs: 1.155643784s ago: executing program 1 (id=87): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.110547037s ago: executing program 4 (id=89): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.003072754s ago: executing program 1 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) 926.352299ms ago: executing program 1 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x7fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 925.683049ms ago: executing program 4 (id=98): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 811.041097ms ago: executing program 4 (id=101): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="0018120000000000000000000000000000000000f21f170db378980387faa27add8f6a2ce67dcead24ade727d4ba260490f177a0f5fd1da70a1bebad9ff514d15ae6440a60b51d7efe7a368b45112ae664523889a3853e22370cb7689a1929ce01e126cef9e91c771e006984749a6363c0427d4c9e22d05f9155876d227222f09b1dbdb876387bd3e5", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 760.51449ms ago: executing program 4 (id=104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf250b0000000c000580080001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x844) 715.247943ms ago: executing program 4 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) 670.331426ms ago: executing program 4 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 669.836136ms ago: executing program 0 (id=109): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000003480)=0x6, 0x69, 0xf6cade091df46e8a) 597.309071ms ago: executing program 0 (id=111): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 596.729821ms ago: executing program 2 (id=113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1ff) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 595.928861ms ago: executing program 0 (id=114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xac}}, 0x0) 549.336014ms ago: executing program 0 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x24, 0x68, 0x1, 0x70bd2c, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15, 0x0, 0xa00}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 544.119015ms ago: executing program 2 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 507.531227ms ago: executing program 0 (id=118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002"], 0x34}}, 0x0) 468.37888ms ago: executing program 2 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4000080) 467.89096ms ago: executing program 0 (id=120): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 467.76219ms ago: executing program 2 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="481d6d7373bca50f0e2b854bc84ff3178aac123022263a2da523967881f9ff407682641735899ce1eb1e3636c059dd4c9c9de0c11a80b68c668415c22eac2d53d22dd16e5fe136e69726f8b16328", 0x4e}, {&(0x7f0000000780)="6dd0e04ab2e79106987c2f0c0f867211ee1a182fbf6838e741a86763150235eab0850e40a565f31d1b55f704fcea226337b6b6ca46229f29a8df5ecd56996fa10322e9e34b058e558207b696d78de80e6e8281ebe63a6e317de858e92d546d1e31fcabb958406e633b30ad1fbb1b427c1a825b0c6433bd5cb2890d45517a93268d8d9d9c024731b461080b259aa81d48534e", 0x92}, {&(0x7f0000000880)="d4b8deaf451ed4ef60d370d8bcd806273a2dc9d6e4c762c015963dafd8a7bcd32347d77d85941ff65b02202c2cba0e4322f1118c9a0fde4835", 0x39}, {&(0x7f00000012c0)="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", 0x416}], 0x4}}], 0x1, 0x10) shutdown(r0, 0x1) 447.378171ms ago: executing program 2 (id=122): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/102, 0x66}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000001280)=[{0x0}], 0x1, &(0x7f0000001340)=""/13, 0xd}, 0x9}], 0x2, 0x0, 0x0) 278.852572ms ago: executing program 2 (id=130): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000540)={0x40, 0x13, 0x5, "5a06d7e274"}, 0x0, 0x0}) 278.667802ms ago: executing program 3 (id=131): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000240)="695ff453148d946d", 0x8, 0x4040, &(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000013c0)) 265.499363ms ago: executing program 3 (id=132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="3801000010000108000000000000f2fffc000000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000400000000000000000000000a0000002000000000000000480003006c7a73"], 0x138}}, 0x0) 215.099256ms ago: executing program 3 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4000080) 114.805703ms ago: executing program 3 (id=134): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x80, 0xe9, 0x2, 0x3, 0x6, 0x7, 0x127, 0x38, 0x123, 0x0, 0x4, 0x20, 0x1, 0x5, 0x800, 0x1}, [{0x5, 0x7, 0x4, 0x5, 0x7f, 0x6, 0x0, 0x81}]}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 105.876074ms ago: executing program 3 (id=135): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004b00005c0000000000069078"], 0x0) 77.809165ms ago: executing program 1 (id=136): sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 71.240936ms ago: executing program 3 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40002081, 0x0, 0x0) 556.8µs ago: executing program 1 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1ff) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 1 (id=139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 30.404126][ T29] audit: type=1400 audit(1759940152.430:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.428045][ T29] audit: type=1400 audit(1759940152.450:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.429284][ T3298] cgroup: Unknown subsys name 'net' [ 30.456502][ T29] audit: type=1400 audit(1759940152.490:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.609428][ T3298] cgroup: Unknown subsys name 'cpuset' [ 30.615886][ T3298] cgroup: Unknown subsys name 'rlimit' [ 30.708186][ T29] audit: type=1400 audit(1759940152.730:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.733267][ T29] audit: type=1400 audit(1759940152.740:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.755338][ T29] audit: type=1400 audit(1759940152.740:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.778720][ T29] audit: type=1400 audit(1759940152.740:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.800185][ T29] audit: type=1400 audit(1759940152.760:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.810788][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.828238][ T29] audit: type=1400 audit(1759940152.760:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.864013][ T29] audit: type=1400 audit(1759940152.870:71): avc: denied { relabelto } for pid=3302 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.899855][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.905041][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 32.979475][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 33.034153][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.041540][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.048731][ T3310] bridge_slave_0: entered allmulticast mode [ 33.055816][ T3310] bridge_slave_0: entered promiscuous mode [ 33.076974][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.084302][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.091872][ T3310] bridge_slave_1: entered allmulticast mode [ 33.098530][ T3310] bridge_slave_1: entered promiscuous mode [ 33.116860][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.141008][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.155616][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.163554][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.171228][ T3309] bridge_slave_0: entered allmulticast mode [ 33.178132][ T3309] bridge_slave_0: entered promiscuous mode [ 33.185871][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.193222][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.200602][ T3309] bridge_slave_1: entered allmulticast mode [ 33.207376][ T3309] bridge_slave_1: entered promiscuous mode [ 33.214527][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 33.255565][ T3310] team0: Port device team_slave_0 added [ 33.281340][ T3310] team0: Port device team_slave_1 added [ 33.295512][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.325131][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.343202][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.350556][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.378682][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.413542][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.420555][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.447591][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.467064][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.474600][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.482457][ T3313] bridge_slave_0: entered allmulticast mode [ 33.489166][ T3313] bridge_slave_0: entered promiscuous mode [ 33.496803][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 33.507078][ T3309] team0: Port device team_slave_0 added [ 33.516606][ T3309] team0: Port device team_slave_1 added [ 33.528197][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.536240][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.544371][ T3313] bridge_slave_1: entered allmulticast mode [ 33.552208][ T3313] bridge_slave_1: entered promiscuous mode [ 33.592257][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 33.603852][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.611743][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.645213][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.664185][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.683727][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.691171][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.717992][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.730248][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.742717][ T3310] hsr_slave_0: entered promiscuous mode [ 33.749301][ T3310] hsr_slave_1: entered promiscuous mode [ 33.800657][ T3313] team0: Port device team_slave_0 added [ 33.828279][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.835714][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.843525][ T3314] bridge_slave_0: entered allmulticast mode [ 33.850682][ T3314] bridge_slave_0: entered promiscuous mode [ 33.858263][ T3313] team0: Port device team_slave_1 added [ 33.880931][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.888072][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.895698][ T3315] bridge_slave_0: entered allmulticast mode [ 33.902814][ T3315] bridge_slave_0: entered promiscuous mode [ 33.909958][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.917239][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.925194][ T3314] bridge_slave_1: entered allmulticast mode [ 33.932274][ T3314] bridge_slave_1: entered promiscuous mode [ 33.945148][ T3309] hsr_slave_0: entered promiscuous mode [ 33.952196][ T3309] hsr_slave_1: entered promiscuous mode [ 33.958417][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 33.964348][ T3309] Cannot create hsr debugfs directory [ 33.973153][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.980759][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.989034][ T3315] bridge_slave_1: entered allmulticast mode [ 33.996124][ T3315] bridge_slave_1: entered promiscuous mode [ 34.044566][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.051767][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.078165][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.104593][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.114455][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.121853][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.150734][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.171504][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.182431][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.192986][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.230766][ T3314] team0: Port device team_slave_0 added [ 34.242910][ T3315] team0: Port device team_slave_0 added [ 34.260338][ T3314] team0: Port device team_slave_1 added [ 34.276098][ T3315] team0: Port device team_slave_1 added [ 34.294680][ T3313] hsr_slave_0: entered promiscuous mode [ 34.300998][ T3313] hsr_slave_1: entered promiscuous mode [ 34.307321][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 34.313761][ T3313] Cannot create hsr debugfs directory [ 34.339931][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.347389][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.374316][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.394266][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.402180][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.428966][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.440635][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.447767][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.474772][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.488201][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.495971][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.522703][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.603615][ T3315] hsr_slave_0: entered promiscuous mode [ 34.610562][ T3315] hsr_slave_1: entered promiscuous mode [ 34.616950][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 34.624419][ T3315] Cannot create hsr debugfs directory [ 34.635325][ T3314] hsr_slave_0: entered promiscuous mode [ 34.642400][ T3314] hsr_slave_1: entered promiscuous mode [ 34.648865][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 34.654955][ T3314] Cannot create hsr debugfs directory [ 34.690157][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.699423][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.723005][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.743687][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.807320][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.824241][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.840939][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.862911][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.882943][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.900560][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.921034][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.931995][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.941815][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.955638][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.968981][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.978561][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.993916][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.034425][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.043123][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.053162][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.062520][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.072182][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.084648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.092252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.105422][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.113018][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.174033][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.211894][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.221314][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.243248][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.250780][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.260704][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.267823][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.290781][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.305098][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.327107][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.334670][ T1435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.347463][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.362271][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.386620][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.397291][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.412772][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.420061][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.437941][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.459668][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.466966][ T1435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.483771][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.506137][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.514366][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.537296][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.582574][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.603661][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.618362][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.625887][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.636177][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.643976][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.655966][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.677840][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.688739][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.734849][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.770231][ T3310] veth0_vlan: entered promiscuous mode [ 35.786853][ T3310] veth1_vlan: entered promiscuous mode [ 35.824151][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.838392][ T3309] veth0_vlan: entered promiscuous mode [ 35.859373][ T3309] veth1_vlan: entered promiscuous mode [ 35.876023][ T3310] veth0_macvtap: entered promiscuous mode [ 35.898704][ T3310] veth1_macvtap: entered promiscuous mode [ 35.925570][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.942807][ T3313] veth0_vlan: entered promiscuous mode [ 35.952144][ T3309] veth0_macvtap: entered promiscuous mode [ 35.967229][ T3315] veth0_vlan: entered promiscuous mode [ 35.975334][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.984465][ T3309] veth1_macvtap: entered promiscuous mode [ 36.002858][ T3313] veth1_vlan: entered promiscuous mode [ 36.010838][ T3315] veth1_vlan: entered promiscuous mode [ 36.018255][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.031739][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.041073][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.050535][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.060914][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.081343][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.091777][ T3314] veth0_vlan: entered promiscuous mode [ 36.102424][ T3327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.117152][ T3315] veth0_macvtap: entered promiscuous mode [ 36.130245][ T3327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.139396][ T3327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.149659][ T3315] veth1_macvtap: entered promiscuous mode [ 36.160796][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 36.160822][ T29] audit: type=1400 audit(1759940158.190:81): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.JdCn7i/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.161229][ T3327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.173781][ T29] audit: type=1400 audit(1759940158.190:82): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.223698][ T29] audit: type=1400 audit(1759940158.190:83): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.JdCn7i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.249945][ T29] audit: type=1400 audit(1759940158.190:84): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.273674][ T29] audit: type=1400 audit(1759940158.190:85): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.JdCn7i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.301281][ T29] audit: type=1400 audit(1759940158.190:86): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.JdCn7i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.329679][ T29] audit: type=1400 audit(1759940158.190:87): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.356694][ T29] audit: type=1400 audit(1759940158.390:88): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.373591][ T3314] veth1_vlan: entered promiscuous mode [ 36.381500][ T29] audit: type=1400 audit(1759940158.390:89): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=4569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.392068][ T3313] veth0_macvtap: entered promiscuous mode [ 36.418867][ T3313] veth1_macvtap: entered promiscuous mode [ 36.434645][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.446680][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.455069][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.460507][ T3314] veth0_macvtap: entered promiscuous mode [ 36.482212][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.491401][ T3314] veth1_macvtap: entered promiscuous mode [ 36.503889][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.512264][ T29] audit: type=1400 audit(1759940158.520:90): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.538681][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.560930][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.582201][ T1435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.613432][ T1435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.654488][ T299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.683714][ T299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.696196][ T299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.741585][ T3492] team0: Port device team_slave_0 removed [ 36.765769][ T299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.794815][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.799531][ T299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.818309][ T3500] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.830113][ T1435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.838565][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.840171][ T1435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.859819][ T1435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.869482][ T1435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.921934][ T3503] dummy0: entered promiscuous mode [ 36.927997][ T3503] bond_slave_0: entered promiscuous mode [ 36.934193][ T3503] bond_slave_0: left promiscuous mode [ 36.940355][ T3503] dummy0: left promiscuous mode [ 36.948118][ T1435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.037093][ T3514] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 37.043595][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 37.045332][ T3514] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 37.125617][ T3521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 37.135980][ T3521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 37.292223][ T3539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 37.386953][ T3550] netlink: 'syz.2.34': attribute type 3 has an invalid length. [ 37.396879][ T3550] netlink: 'syz.2.34': attribute type 3 has an invalid length. [ 37.412128][ T3554] tipc: Started in network mode [ 37.417189][ T3554] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 37.426571][ T3554] tipc: Enabling of bearer rejected, failed to enable media [ 37.511957][ T3566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 37.656359][ T3585] netlink: 'syz.2.50': attribute type 3 has an invalid length. [ 37.687247][ T3585] netlink: 'syz.2.50': attribute type 3 has an invalid length. [ 37.900533][ T3613] loop2: detected capacity change from 0 to 512 [ 37.934609][ T3413] kernel write not supported for file bpf-prog (pid: 3413 comm: kworker/1:5) [ 37.953869][ T3613] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.63: casefold flag without casefold feature [ 37.994899][ T3613] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.63: couldn't read orphan inode 15 (err -117) [ 38.009321][ T3613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.034129][ T3629] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 38.042060][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 38.145080][ T3636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.73'. [ 38.248054][ T3646] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.78'. [ 38.277048][ T3649] capability: warning: `syz.0.79' uses deprecated v2 capabilities in a way that may be insecure [ 38.294024][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 38.656206][ T3687] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 38.664044][ T3687] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 38.865776][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.975593][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 38.991492][ T3720] netlink: 'syz.3.112': attribute type 3 has an invalid length. [ 39.033699][ T3724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 39.116199][ T3736] loop0: detected capacity change from 0 to 512 [ 39.132727][ T3736] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.120: casefold flag without casefold feature [ 39.149902][ T3736] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.120: couldn't read orphan inode 15 (err -117) [ 39.166047][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.259958][ T3754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.268847][ T3754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.509634][ T3753] ================================================================== [ 39.517872][ T3753] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 39.525280][ T3753] [ 39.527625][ T3753] write to 0xffff88810558254c of 4 bytes by task 3736 on cpu 0: [ 39.533906][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 39.535445][ T3753] xas_set_mark+0x12b/0x140 [ 39.549032][ T3753] __folio_start_writeback+0x155/0x390 [ 39.554625][ T3753] ext4_bio_write_folio+0x5ad/0x9f0 [ 39.560280][ T3753] mpage_process_page_bufs+0x4a1/0x620 [ 39.565879][ T3753] mpage_prepare_extent_to_map+0x786/0xc00 [ 39.571876][ T3753] ext4_do_writepages+0xa05/0x2750 [ 39.577048][ T3753] ext4_writepages+0x176/0x300 [ 39.582019][ T3753] do_writepages+0x1c3/0x310 [ 39.586726][ T3753] file_write_and_wait_range+0x156/0x2c0 [ 39.592494][ T3753] generic_buffers_fsync_noflush+0x45/0x120 [ 39.598614][ T3753] ext4_sync_file+0x1ab/0x690 [ 39.603507][ T3753] vfs_fsync_range+0x10a/0x130 [ 39.608412][ T3753] ext4_buffered_write_iter+0x34f/0x3c0 [ 39.614023][ T3753] ext4_file_write_iter+0x387/0xf60 [ 39.619957][ T3753] iter_file_splice_write+0x666/0xa60 [ 39.625450][ T3753] direct_splice_actor+0x156/0x2a0 [ 39.630684][ T3753] splice_direct_to_actor+0x312/0x680 [ 39.636233][ T3753] do_splice_direct+0xda/0x150 [ 39.641115][ T3753] do_sendfile+0x380/0x650 [ 39.645677][ T3753] __x64_sys_sendfile64+0x105/0x150 [ 39.651088][ T3753] x64_sys_call+0x2bb4/0x3000 [ 39.655890][ T3753] do_syscall_64+0xd2/0x200 [ 39.660691][ T3753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.666613][ T3753] [ 39.668972][ T3753] read to 0xffff88810558254c of 4 bytes by task 3753 on cpu 1: [ 39.676588][ T3753] xas_find_marked+0x5dc/0x620 [ 39.681405][ T3753] find_get_entry+0x5d/0x380 [ 39.686140][ T3753] filemap_get_folios_tag+0x92/0x210 [ 39.691471][ T3753] mpage_prepare_extent_to_map+0x320/0xc00 [ 39.697402][ T3753] ext4_do_writepages+0xa05/0x2750 [ 39.702754][ T3753] ext4_writepages+0x176/0x300 [ 39.707652][ T3753] do_writepages+0x1c3/0x310 [ 39.712284][ T3753] file_write_and_wait_range+0x156/0x2c0 [ 39.717981][ T3753] generic_buffers_fsync_noflush+0x45/0x120 [ 39.724025][ T3753] ext4_sync_file+0x1ab/0x690 [ 39.728926][ T3753] vfs_fsync_range+0x10a/0x130 [ 39.734000][ T3753] ext4_buffered_write_iter+0x34f/0x3c0 [ 39.739606][ T3753] ext4_file_write_iter+0x387/0xf60 [ 39.744952][ T3753] iter_file_splice_write+0x666/0xa60 [ 39.750533][ T3753] direct_splice_actor+0x156/0x2a0 [ 39.756232][ T3753] splice_direct_to_actor+0x312/0x680 [ 39.761657][ T3753] do_splice_direct+0xda/0x150 [ 39.766492][ T3753] do_sendfile+0x380/0x650 [ 39.771207][ T3753] __x64_sys_sendfile64+0x105/0x150 [ 39.776555][ T3753] x64_sys_call+0x2bb4/0x3000 [ 39.781448][ T3753] do_syscall_64+0xd2/0x200 [ 39.786031][ T3753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.791962][ T3753] [ 39.794324][ T3753] value changed: 0x0a000021 -> 0x04000021 [ 39.800314][ T3753] [ 39.802828][ T3753] Reported by Kernel Concurrency Sanitizer on: [ 39.809418][ T3753] CPU: 1 UID: 0 PID: 3753 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.819195][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 39.829626][ T3753] ================================================================== [ 40.025950][ T3753] syz.0.120 (3753) used greatest stack depth: 9064 bytes left [ 40.044650][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.