last executing test programs: 2.429137268s ago: executing program 1 (id=150): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88040, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) shutdown(r2, 0x1) mkdirat(r0, 0x0, 0x1) 1.577542858s ago: executing program 1 (id=166): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) 1.492315473s ago: executing program 0 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_io_uring_setup(0x271, &(0x7f0000000080)={0x0, 0x9249, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r1, 0x7a98, 0xb816, 0x0, 0x0, 0x0) 1.341115232s ago: executing program 3 (id=172): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.307788914s ago: executing program 0 (id=173): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)="de5c", 0x2}], 0x1}, 0x811) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 1.252574847s ago: executing program 3 (id=174): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) write(r0, &(0x7f0000000180)='A', 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1.246647217s ago: executing program 3 (id=180): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r1, 0x8927, &(0x7f00000008c0)={'vxcan1\x00', @ifru_ivalue=0xffff}) 1.206402339s ago: executing program 3 (id=181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) 869.913199ms ago: executing program 3 (id=186): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 772.562745ms ago: executing program 3 (id=188): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1, 0x6, 0x5) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4) 693.78329ms ago: executing program 4 (id=189): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x1852, 0x10000, 0x0, 0x1bf, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 624.585754ms ago: executing program 4 (id=191): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) 624.298683ms ago: executing program 2 (id=192): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) 591.749025ms ago: executing program 1 (id=193): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x4) mmap(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x300000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x7f, 0x9}, &(0x7f000009de80), 0x0) 568.240967ms ago: executing program 4 (id=194): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'ip6gre0\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'wlan1\x00'}}) 476.597192ms ago: executing program 4 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 471.916652ms ago: executing program 1 (id=196): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 407.678786ms ago: executing program 1 (id=197): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="90b3185ad7"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 384.388768ms ago: executing program 0 (id=198): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2010}) ioctl$TCXONC(r1, 0x540a, 0x3) 328.072131ms ago: executing program 0 (id=199): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 327.712031ms ago: executing program 4 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x25, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x120}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 327.498741ms ago: executing program 1 (id=201): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1, 0x1800}], 0x1, 0x0) 254.584115ms ago: executing program 2 (id=202): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 218.350408ms ago: executing program 2 (id=203): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clock_adjtime(0x6, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x24f, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x6, 0x2, 0x3, 0x6695, 0x3}) 201.694639ms ago: executing program 4 (id=204): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) 129.939182ms ago: executing program 0 (id=205): unshare(0x24040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 56.551807ms ago: executing program 0 (id=206): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x40) 56.219327ms ago: executing program 2 (id=207): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x101, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 27.829708ms ago: executing program 2 (id=208): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 0s ago: executing program 2 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 33.611265][ T29] audit: type=1400 audit(1769624115.674:62): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.634437][ T29] audit: type=1400 audit(1769624115.694:63): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.636905][ T3300] cgroup: Unknown subsys name 'net' [ 33.662301][ T29] audit: type=1400 audit(1769624115.724:64): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.859106][ T3300] cgroup: Unknown subsys name 'cpuset' [ 33.865372][ T3300] cgroup: Unknown subsys name 'rlimit' [ 34.037617][ T29] audit: type=1400 audit(1769624116.094:65): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.060955][ T29] audit: type=1400 audit(1769624116.104:66): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.081572][ T29] audit: type=1400 audit(1769624116.104:67): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.102060][ T29] audit: type=1400 audit(1769624116.104:68): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.122368][ T29] audit: type=1400 audit(1769624116.114:69): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.143425][ T29] audit: type=1400 audit(1769624116.134:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.168844][ T29] audit: type=1400 audit(1769624116.134:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.189866][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.232786][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.406930][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.442559][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.465224][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.565978][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.573143][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.580434][ T3312] bridge_slave_0: entered allmulticast mode [ 35.586854][ T3312] bridge_slave_0: entered promiscuous mode [ 35.600647][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.607736][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.614911][ T3322] bridge_slave_0: entered allmulticast mode [ 35.621362][ T3322] bridge_slave_0: entered promiscuous mode [ 35.627955][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.640145][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.647220][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.654468][ T3312] bridge_slave_1: entered allmulticast mode [ 35.660959][ T3312] bridge_slave_1: entered promiscuous mode [ 35.669946][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.677024][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.684262][ T3316] bridge_slave_0: entered allmulticast mode [ 35.690872][ T3316] bridge_slave_0: entered promiscuous mode [ 35.697492][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.704603][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.712086][ T3322] bridge_slave_1: entered allmulticast mode [ 35.718711][ T3322] bridge_slave_1: entered promiscuous mode [ 35.741899][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.749134][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.756367][ T3316] bridge_slave_1: entered allmulticast mode [ 35.762922][ T3316] bridge_slave_1: entered promiscuous mode [ 35.779884][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.794232][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 35.818814][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.834614][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.849362][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.866734][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.881532][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.917485][ T3312] team0: Port device team_slave_0 added [ 35.933103][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.940416][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.947664][ T3313] bridge_slave_0: entered allmulticast mode [ 35.954370][ T3313] bridge_slave_0: entered promiscuous mode [ 35.964583][ T3322] team0: Port device team_slave_0 added [ 35.971378][ T3312] team0: Port device team_slave_1 added [ 35.977597][ T3322] team0: Port device team_slave_1 added [ 35.984137][ T3316] team0: Port device team_slave_0 added [ 35.994760][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.001852][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.009149][ T3313] bridge_slave_1: entered allmulticast mode [ 36.015883][ T3313] bridge_slave_1: entered promiscuous mode [ 36.030910][ T3316] team0: Port device team_slave_1 added [ 36.051154][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.058230][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.084853][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.105773][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.112942][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.138982][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.160153][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.167139][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.193299][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.209137][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.216158][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.242168][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.254083][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.263383][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.270558][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.278012][ T3323] bridge_slave_0: entered allmulticast mode [ 36.284699][ T3323] bridge_slave_0: entered promiscuous mode [ 36.294423][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.301456][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.327456][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.341590][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.348607][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.374644][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.386686][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.395856][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.403009][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.410454][ T3323] bridge_slave_1: entered allmulticast mode [ 36.416873][ T3323] bridge_slave_1: entered promiscuous mode [ 36.434699][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.445576][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.494367][ T3323] team0: Port device team_slave_0 added [ 36.506917][ T3322] hsr_slave_0: entered promiscuous mode [ 36.513308][ T3322] hsr_slave_1: entered promiscuous mode [ 36.520119][ T3313] team0: Port device team_slave_0 added [ 36.536659][ T3323] team0: Port device team_slave_1 added [ 36.544530][ T3316] hsr_slave_0: entered promiscuous mode [ 36.550727][ T3316] hsr_slave_1: entered promiscuous mode [ 36.556619][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 36.562397][ T3316] Cannot create hsr debugfs directory [ 36.573849][ T3313] team0: Port device team_slave_1 added [ 36.582443][ T3312] hsr_slave_0: entered promiscuous mode [ 36.588719][ T3312] hsr_slave_1: entered promiscuous mode [ 36.594527][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 36.600319][ T3312] Cannot create hsr debugfs directory [ 36.631021][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.638164][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.664138][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.675504][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.682545][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.708564][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.724279][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.731292][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.757706][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.780713][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.787702][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.813859][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.897641][ T3313] hsr_slave_0: entered promiscuous mode [ 36.903713][ T3313] hsr_slave_1: entered promiscuous mode [ 36.909722][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 36.915448][ T3313] Cannot create hsr debugfs directory [ 36.930895][ T3323] hsr_slave_0: entered promiscuous mode [ 36.936885][ T3323] hsr_slave_1: entered promiscuous mode [ 36.942939][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 36.948780][ T3323] Cannot create hsr debugfs directory [ 37.097421][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.119445][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.128184][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.139426][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.157927][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.169028][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.180114][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.192033][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.216354][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.228637][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.238104][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.247311][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.312791][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.328061][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.342944][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.352439][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.364391][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.389693][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.407561][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.426791][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.437274][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.444414][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.467520][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.475210][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.484803][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.495771][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.502869][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.511791][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.519873][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.536481][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.543652][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.560809][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.567894][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.594053][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.623228][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.647142][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.654299][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.676017][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.683128][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.695509][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.723951][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.753700][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.760866][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.776789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.783978][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.801326][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.816339][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.829526][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.843666][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.850766][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.870491][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.889105][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.896207][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.923253][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.939541][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.950183][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.003583][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.095333][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.121186][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.176562][ T3312] veth0_vlan: entered promiscuous mode [ 38.208140][ T3316] veth0_vlan: entered promiscuous mode [ 38.241460][ T3316] veth1_vlan: entered promiscuous mode [ 38.247910][ T3312] veth1_vlan: entered promiscuous mode [ 38.290903][ T3322] veth0_vlan: entered promiscuous mode [ 38.297621][ T3312] veth0_macvtap: entered promiscuous mode [ 38.320070][ T3312] veth1_macvtap: entered promiscuous mode [ 38.326579][ T3322] veth1_vlan: entered promiscuous mode [ 38.339581][ T3323] veth0_vlan: entered promiscuous mode [ 38.348453][ T3316] veth0_macvtap: entered promiscuous mode [ 38.365417][ T3316] veth1_macvtap: entered promiscuous mode [ 38.375692][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.384073][ T3323] veth1_vlan: entered promiscuous mode [ 38.393657][ T3313] veth0_vlan: entered promiscuous mode [ 38.402378][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.412130][ T3313] veth1_vlan: entered promiscuous mode [ 38.425665][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.434668][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.446372][ T3322] veth0_macvtap: entered promiscuous mode [ 38.457389][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.469829][ T3322] veth1_macvtap: entered promiscuous mode [ 38.481602][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.496505][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.512391][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.535988][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.544854][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.555255][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.569160][ T3313] veth0_macvtap: entered promiscuous mode [ 38.583216][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.599621][ T3323] veth0_macvtap: entered promiscuous mode [ 38.606516][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.615912][ T3313] veth1_macvtap: entered promiscuous mode [ 38.626627][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.636742][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 38.636759][ T29] audit: type=1400 audit(1769624120.694:94): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.678231][ T3323] veth1_macvtap: entered promiscuous mode [ 38.691068][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.699040][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.708089][ T29] audit: type=1400 audit(1769624120.694:95): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.728927][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.732609][ T29] audit: type=1400 audit(1769624120.694:96): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.766815][ T3483] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 38.780195][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.795400][ T29] audit: type=1400 audit(1769624120.814:97): avc: denied { read write } for pid=3484 comm="syz.0.1" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.818414][ T29] audit: type=1400 audit(1769624120.814:98): avc: denied { open } for pid=3484 comm="syz.0.1" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.841165][ T29] audit: type=1400 audit(1769624120.814:99): avc: denied { ioctl } for pid=3484 comm="syz.0.1" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.872883][ T29] audit: type=1400 audit(1769624120.894:100): avc: denied { map_create } for pid=3486 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.879533][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.891798][ T29] audit: type=1400 audit(1769624120.894:101): avc: denied { bpf } for pid=3486 comm="syz.1.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.919407][ T29] audit: type=1400 audit(1769624120.894:102): avc: denied { map_read map_write } for pid=3486 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.938962][ T29] audit: type=1400 audit(1769624120.894:103): avc: denied { allowed } for pid=3486 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.968557][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.977553][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.989171][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.027400][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.112214][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.146886][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.192114][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.219084][ T3507] Zero length message leads to an empty skb [ 39.264800][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.301988][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.311437][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.320480][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.330383][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.345445][ T3512] mmap: syz.4.12 (3512) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.382963][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.399796][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.533118][ T3535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'. [ 39.609171][ T3538] loop1: detected capacity change from 0 to 512 [ 39.635545][ T3538] EXT4-fs: Ignoring removed nobh option [ 39.642030][ T3538] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.655322][ T3538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.672921][ T3538] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.686832][ T3538] EXT4-fs (loop1): 1 truncate cleaned up [ 39.693300][ T3538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.176099][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 40.185039][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 40.249061][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 40.257818][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 40.258185][ T52] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.316577][ T52] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.357433][ T52] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.396442][ T52] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.524510][ T3581] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 40.565377][ T3579] loop2: detected capacity change from 0 to 8192 [ 40.578729][ T3579] ======================================================= [ 40.578729][ T3579] WARNING: The mand mount option has been deprecated and [ 40.578729][ T3579] and is ignored by this kernel. Remove the mand [ 40.578729][ T3579] option from the mount to silence this warning. [ 40.578729][ T3579] ======================================================= [ 40.717739][ T3538] syz.1.21 (3538) used greatest stack depth: 7232 bytes left [ 40.844381][ T3600] loop3: detected capacity change from 0 to 512 [ 40.883120][ T3600] EXT4-fs (loop3): 1 truncate cleaned up [ 40.901720][ T3600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.920953][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.943589][ T3600] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.47: bg 0: block 465: padding at end of block bitmap is not set [ 41.090880][ T3603] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.47: invalid indirect mapped block 234881024 (level 0) [ 41.259486][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.550080][ T3628] loop4: detected capacity change from 0 to 164 [ 41.586606][ T3628] rock: directory entry would overflow storage [ 41.592911][ T3628] rock: sig=0x4d4e, size=5, remaining=4 [ 41.847243][ T3658] vlan2: entered allmulticast mode [ 41.852499][ T3658] bond0: entered allmulticast mode [ 41.857686][ T3658] bond_slave_0: entered allmulticast mode [ 41.863490][ T3658] bond_slave_1: entered allmulticast mode [ 41.872467][ T3658] netlink: 14 bytes leftover after parsing attributes in process `syz.4.70'. [ 41.906370][ T3658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.915274][ T3658] bond_slave_0: left allmulticast mode [ 41.926641][ T3658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.939499][ T3658] bond_slave_1: left allmulticast mode [ 41.946158][ T3658] bond0 (unregistering): Released all slaves [ 42.096284][ T3671] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 42.104660][ T3671] syz_tun: entered promiscuous mode [ 42.113870][ T3671] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 42.137943][ T3674] sctp: [Deprecated]: syz.4.77 (pid 3674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 42.137943][ T3674] Use struct sctp_sack_info instead [ 42.184451][ T3679] loop0: detected capacity change from 0 to 512 [ 42.222234][ T3679] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.259775][ T3679] EXT4-fs (loop0): 1 truncate cleaned up [ 42.266979][ T3679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.393347][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.433853][ T3699] vlan2: entered allmulticast mode [ 42.439128][ T3699] bond0: entered allmulticast mode [ 42.444268][ T3699] bond_slave_0: entered allmulticast mode [ 42.450174][ T3699] bond_slave_1: entered allmulticast mode [ 42.486165][ T3707] netlink: 14 bytes leftover after parsing attributes in process `syz.2.88'. [ 42.514981][ T3707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.529352][ T3707] bond_slave_0: left allmulticast mode [ 42.562189][ T3707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.580426][ T3709] loop0: detected capacity change from 0 to 8192 [ 42.589442][ T3707] bond_slave_1: left allmulticast mode [ 42.598522][ T3707] bond0 (unregistering): Released all slaves [ 42.699650][ C0] hrtimer: interrupt took 33672 ns [ 42.800252][ T3726] loop1: detected capacity change from 0 to 512 [ 42.863008][ T3726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.931453][ T3726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.091201][ T3726] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.131922][ T3734] loop2: detected capacity change from 0 to 32768 [ 43.200558][ T3734] loop2: p1 p3 < > [ 43.362893][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.382432][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 43.394323][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 43.468336][ T3751] syz.3.107 uses obsolete (PF_INET,SOCK_PACKET) [ 43.715134][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 43.715153][ T29] audit: type=1400 audit(1769624125.774:216): avc: denied { connect } for pid=3772 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.748878][ T29] audit: type=1400 audit(1769624125.814:217): avc: denied { write } for pid=3772 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.893587][ T3780] loop4: detected capacity change from 0 to 8192 [ 43.941799][ T29] audit: type=1400 audit(1769624126.004:218): avc: denied { watch } for pid=3781 comm="syz.1.120" path="/29" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.376540][ T3803] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 44.378123][ T3804] loop3: detected capacity change from 0 to 256 [ 44.419211][ T29] audit: type=1400 audit(1769624126.484:219): avc: denied { create } for pid=3805 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.426043][ T29] audit: type=1400 audit(1769624126.484:220): avc: denied { setopt } for pid=3805 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.427078][ T29] audit: type=1400 audit(1769624126.484:221): avc: denied { bind } for pid=3805 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.437501][ T29] audit: type=1400 audit(1769624126.494:222): avc: denied { write } for pid=3805 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.457919][ T3809] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 44.457955][ T3809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.458074][ T3809] vhci_hcd vhci_hcd.0: Device attached [ 44.467293][ T3810] usbip_core: unknown command [ 44.467307][ T3810] vhci_hcd: unknown pdu 0 [ 44.467318][ T3810] usbip_core: unknown command [ 44.468165][ T3442] vhci_hcd vhci_hcd.1: stop threads [ 44.468216][ T3442] vhci_hcd vhci_hcd.1: release socket [ 44.468236][ T3442] vhci_hcd vhci_hcd.1: disconnect device [ 44.510720][ T29] audit: type=1400 audit(1769624126.574:223): avc: denied { create } for pid=3813 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.510822][ T29] audit: type=1400 audit(1769624126.574:224): avc: denied { setopt } for pid=3813 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.511516][ T3804] FAT-fs (loop3): codepage cp950 not found [ 44.627272][ T29] audit: type=1400 audit(1769624126.684:225): avc: denied { perfmon } for pid=3815 comm="syz.0.131" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.101375][ T3833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.138'. [ 45.111697][ T3833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.138'. [ 45.280397][ T3844] loop3: detected capacity change from 0 to 8192 [ 45.689259][ T3851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.146'. [ 45.709646][ T3851] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 46.338629][ T3886] netlink: 'syz.3.161': attribute type 4 has an invalid length. [ 46.370943][ T3886] netlink: 'syz.3.161': attribute type 4 has an invalid length. [ 46.496190][ T3893] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 46.927389][ T3912] loop1: detected capacity change from 0 to 8192 [ 46.934095][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 46.942925][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 46.951838][ T3917] netlink: 'syz.2.171': attribute type 12 has an invalid length. [ 46.999786][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 46.999779][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.003586][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.008688][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 47.034215][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.035090][ T3917] netlink: 'syz.2.171': attribute type 12 has an invalid length. [ 47.058484][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.899730][ T3965] loop1: detected capacity change from 0 to 128 [ 47.918559][ T3965] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.935745][ T3965] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.962385][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.087975][ T3979] vlan2: entered allmulticast mode [ 48.093278][ T3979] bond0: entered allmulticast mode [ 48.098487][ T3979] bond_slave_0: entered allmulticast mode [ 48.104429][ T3979] bond_slave_1: entered allmulticast mode [ 48.110402][ T3979] syz_tun: entered allmulticast mode [ 48.122049][ T3979] netlink: 14 bytes leftover after parsing attributes in process `syz.0.199'. [ 48.146877][ T3979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.155942][ T3979] bond_slave_0: left allmulticast mode [ 48.163238][ T3979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.172427][ T3979] bond_slave_1: left allmulticast mode [ 48.180497][ T3979] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 48.190694][ T3979] syz_tun: left allmulticast mode [ 48.197089][ T3979] bond0 (unregistering): Released all slaves [ 48.272077][ T3992] loop4: detected capacity change from 0 to 8192 [ 48.499075][ T3996] ================================================================== [ 48.507218][ T3996] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 48.514477][ T3996] [ 48.516842][ T3996] write to 0xffff8881335ef592 of 2 bytes by task 3992 on cpu 1: [ 48.524519][ T3996] fat16_ent_put+0x28/0x60 [ 48.528984][ T3996] fat_free_clusters+0x2cc/0x8a0 [ 48.534003][ T3996] fat_truncate_blocks+0x510/0x5a0 [ 48.539231][ T3996] fat_write_end+0xba/0x160 [ 48.543768][ T3996] generic_perform_write+0x311/0x490 [ 48.549101][ T3996] __generic_file_write_iter+0x9e/0x120 [ 48.554694][ T3996] generic_file_write_iter+0x8d/0x310 [ 48.560116][ T3996] vfs_write+0x5a6/0x9f0 [ 48.564389][ T3996] __x64_sys_pwrite64+0xfd/0x150 [ 48.569356][ T3996] x64_sys_call+0x9f7/0x3000 [ 48.573985][ T3996] do_syscall_64+0xc0/0x2a0 [ 48.578536][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.584466][ T3996] [ 48.586814][ T3996] read to 0xffff8881335ef400 of 512 bytes by task 3996 on cpu 0: [ 48.594551][ T3996] fat_mirror_bhs+0x1df/0x320 [ 48.599293][ T3996] fat_alloc_clusters+0xb48/0xc50 [ 48.604385][ T3996] fat_get_block+0x258/0x5e0 [ 48.609034][ T3996] __block_write_begin_int+0x400/0xf90 [ 48.614524][ T3996] cont_write_begin+0x5fe/0x970 [ 48.619578][ T3996] fat_write_begin+0x4f/0xe0 [ 48.624208][ T3996] cont_write_begin+0x1b0/0x970 [ 48.629086][ T3996] fat_write_begin+0x4f/0xe0 [ 48.633700][ T3996] generic_cont_expand_simple+0xb0/0x150 [ 48.639377][ T3996] fat_cont_expand+0x3e/0x170 [ 48.644094][ T3996] fat_fallocate+0x177/0x1c0 [ 48.648719][ T3996] vfs_fallocate+0x3b6/0x450 [ 48.653430][ T3996] __x64_sys_fallocate+0x7a/0xd0 [ 48.658576][ T3996] x64_sys_call+0x1cd4/0x3000 [ 48.663292][ T3996] do_syscall_64+0xc0/0x2a0 [ 48.667832][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.673757][ T3996] [ 48.676106][ T3996] Reported by Kernel Concurrency Sanitizer on: [ 48.682292][ T3996] CPU: 0 UID: 0 PID: 3996 Comm: syz.4.204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.691957][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.702067][ T3996] ==================================================================